相关实验视频

Updated: Sep 8, 2025

Large Scale Energy Efficient Sensor Network Routing Using a Quantum Processor Unit

Large Scale Energy Efficient Sensor Network Routing Using a Quantum Processor Unit

Published on: September 8, 2023

PREE:用于工业控制系统中网络协议的逆向工程的启发式构建器

Syed Ali Qasim¹, Wooyeon Jo¹, Irfan Ahmed¹

¹Virginia Commonwealth University, Richmond, VA, 23284, USA.

Forensic science international Digital investigation

|August 20, 2025

概括

本研究介绍了PREE,该工具使用现有的工业控制系统 (ICS) 协议知识来帮助逆向设计新协议. PREE有效地确定了共同领域,改善了ICS安全和数字取证.

科学领域:

计算机科学计算机科学
网络安全网络安全
工业控制系统工业控制系统

背景情况:

工业控制系统 (ICS) 对关键基础设施至关重要,使用专有协议进行通信.
这些协议的逆向工程对于增强数字取证和调查ICS攻击至关重要.
现有的ICS协议逆向工程方法通常是手动的或范围有限的.

研究的目的:

介绍 PREE,一个用于逆向工程 ICS 协议的启发式构建器.
测试假设,一个ICS协议的知识可以帮助逆向工程其他.
提高ICS协议分析的效率和准确性.

主要方法:

开发了PREE,一个启发式构建器,使控制工程师能够创建现场识别启发式.
使用滚动窗口,垂直窗口和频率表技术创建了七种启发式变体.
评估了六个ICS协议 (Modbus TCP,UMAS,ENIP,Omron FINS,CLICK,PCCC) 在四个供应商的五个PLC上的启发式.

主要成果:

在多个协议中,PREE有效地识别了诸如函数代码,消息类型和PLC内存地址等常见字段.
与现有工具 (NetPlier,Netzob,Discoverer) 相比,PREE表现出卓越的准确性,简洁性,完整性和一致性.
在Click Koyo PLC的漏洞研究中的应用以及用于攻击调查的SNORT规则的生成.

结论:

对于逆向工程来说,ICS协议之间的知识传输是可行的.
PREE为ICS协议分析和安全提供了一种新有效的方法.
开发的启发式分析和工具增强了ICS安全性,漏洞评估和数字取证能力.

关键词:

控制逻辑控制逻辑控制逻辑法医科学法医科学工业控制系统工业控制系统这是一个 SCADA 系统.

更多相关视频

Interactive and Visualized Online Experimentation System for Engineering Education and Research

Interactive and Visualized Online Experimentation System for Engineering Education and Research

Published on: November 24, 2021

Closed-loop Neuro-robotic Experiments to Test Computational Properties of Neuronal Networks

Closed-loop Neuro-robotic Experiments to Test Computational Properties of Neuronal Networks

Published on: March 2, 2015

相关概念视频

Control Systems: Applications

Control Systems: Applications

Electrical engineering plays a pivotal role in our daily lives, with control systems at the heart of many applications, from home appliances to sophisticated space shuttles. Control systems manage and regulate the behavior of devices and processes, ensuring they function safely, correctly, and efficiently.
In modern vehicles, control systems manage various functions to enhance performance and safety. The steering wheel and accelerator are primary inputs in a car's control system. The...

Block Diagram Reduction

Block Diagram Reduction

The process of deriving the transfer function of a control system often involves reducing its block diagram to a single block. This simplification can be achieved through a series of strategic operations, including relocating branch points and comparators. These operations preserve the overall function of the system while allowing for easier manipulation and combination of blocks.
The first step in this process is the identification and relocation of a branch point. A branch point, where a...

Heuristics

Heuristics

Heuristics are problem-solving strategies that use mental shortcuts to simplify decision-making. Unlike algorithms, which must be followed precisely to achieve a correct result, heuristics offer a general problem-solving framework. They save time and energy but can sometimes lead to less rational decisions.
People often rely on heuristics when faced with an overload of information, limited time, low importance of the decision, limited information, or when a heuristic readily comes to mind. For...

Network Function of a Circuit

Network Function of a Circuit

Frequency response analysis in electrical circuits provides vital insights into a circuit's behavior as the frequency of the input signal changes. The transfer function, a mathematical tool, is instrumental in understanding this behavior. It defines the relationship between phasor output and input and comes in four types: voltage gain, current gain, transfer impedance, and transfer admittance. The critical components of the transfer function are the poles and zeros.

Signal Flow Graphs

Signal Flow Graphs

Signal-flow graphs offer a streamlined and intuitive approach to representing control systems, providing an alternative to traditional block diagrams. These graphs use branches to symbolize systems and nodes to represent signals, effectively illustrating the relationships and interactions within the system.
In a signal-flow graph, branches denote the system's transfer functions, while nodes represent the signals. The direction of signal flow is indicated by arrows, with the corresponding...

Control Systems

Control Systems

Control systems are everywhere in contemporary society, influencing diverse applications from aerospace to automated manufacturing. These systems can be found naturally within biological processes, such as blood sugar regulation and heart rate adjustment in response to stress, as well as in man-made systems like elevators and automated vehicles. A control system is essentially a network of subsystems and processes that collaboratively convert specific inputs into desired outputs.
At the heart...