The industrial control systems (ICS) is a core component of our country's important infrastructure, such as civil aviation, energy, power grid stations and traffic. In recent years, due to the occurrence of national ICS attacks such as "Stuxnet", the world has paid more attention to the security of it. At present, all civil aviation ICS are operating in physical isolation. However, from the perspective of the development of the smart civil aviation and the 14 five-year civil aviation plan, the ICS will focus on the efficient collaboration between systems and evolve in the operation mode of interconnection. The overall safety protection of the ICS will become the key to the safe and efficient operation of civil aviation. In this paper, we introduce four classic civil aviation ICS, and build a simulation industrial platform for vulnerability mining and testing. Then, we propose a vulnerability mining framework based on the Sequence Generation Adversarial Network (SeqGAN) and Peach, and develop a prototype system based on Peach open source libraries, which includes a new service-based exception monitoring method. Finally, we deployed the prototype system to the platform and discovered two zero-day vulnerabilities that causes the ICS denial of service and data overflow.


    Zugriff

    Zugriff prüfen

    Verfügbarkeit in meiner Bibliothek prüfen

    Bestellung bei Subito €


    Exportieren, teilen und zitieren



    Titel :

    Civil Aviation Industrial Control Systems Vulnerability Mining Based on Fuzzing Technology


    Beteiligte:
    Gong, Li (Autor:in) / Ban, Xinbo (Autor:in) / He, Long (Autor:in) / Li, Jiasheng (Autor:in) / Deng, Shengji (Autor:in) / Zhang, Yi (Autor:in)


    Erscheinungsdatum :

    11.10.2023


    Format / Umfang :

    3222058 byte




    Medientyp :

    Aufsatz (Konferenz)


    Format :

    Elektronische Ressource


    Sprache :

    Englisch



    Consumer UAV Cybersecurity Vulnerability Assessment Using Fuzzing Tests

    Rudo, David / Zeng, Kai | ArXiv | 2020

    Freier Zugriff

    CIVIL AVIATION

    Emerald Group Publishing | 1943


    Civil aviation

    Engineering Index Backfile | 1929


    Passive Radar Technology for Civil Aviation

    Quilter, T. J. / Institution of Electrical Engineers | British Library Conference Proceedings | 2002


    Civil aviation

    Hulbert, N.J. | Engineering Index Backfile | 1927