基于Modbus工控协议的漏洞发掘设计研究  

Research on vulnerability excavation design based on Modbus industrial control protocol

作　　者：钮彬 

机构地区：[1]国网六安供电公司,安徽六安237006

出　　处：《能源与环保》2017年第12期286-288,292,共4页CHINA ENERGY AND ENVIRONMENTAL PROTECTION

摘　　要：为了深度分析智能电网工业控制系统中Modbus通信协议安全问题,采用Modbus Poll服务模拟器与Modbus Slave对Modbus工控协议的漏洞发掘设计进行模拟,对Modbus工控协议漏洞进行分析,漏洞主要为协议涉及安全问题、缓冲区溢出问题、Modbus/TCP安全问题,针对诸多漏洞,研究了Modbus工控协议漏洞挖掘方案设计,设计主要研究了数据包分析、数据包发送、异常分析和监测、漏洞模块确认,对Modbus工控协议漏洞发掘实现研究。研究对于推进工控系统信息安全具有至关重要的作用,为国家安全层面提供支持和保障。In order to deeply analyze the security problem of Modbus communication protocol in intelligent power grid industrial control system,Modbus Poll service simulator and Modbus Slave were used to simulate the loophole excavation design of Modbus industrial protocol.The loopholes in Modbus protocol were analyzed.The loopholes were mainly related to security.The problem of buffer overflow,Modbus/TCP security problem,and the design of the mining protocol for Modbus control protocol was studied.The design mainly studied the packet analysis,packet transmission,exception analysis and monitoring,and the vulnerability module confirmation.It was of vital importance to promote the information security of industrial control system and provided support and guarantee for the national security level.

关 键 词：Modbus工控协议 漏洞发掘 MODBUS POLL MODBUS SLAVE 异常分析和监测 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP273[自动化与计算机技术—计算机科学与技术]