IEC60870-5-104规约安全性分析及攻击实验  

Cyber security analysis and attack experiment on IEC60870-5-104 SCADA system

作　　者：江泽鑫 Jiang Zexin(Guangzhou Bonson Information System Co.,Ltd.,Gangzhou 510080,China)

机构地区：[1]广州邦讯信息系统有限公司,广东广州510080

出　　处：《信息技术与网络安全》2018年第10期1-4,14,共5页Information Technology and Network Security

摘　　要：分析了电力IEC60870-5-104(简称104)规约的安全性,指出104规约遥控报文的不安全特性;基于中间人攻击思路,提出104规约遥控过程的三种攻击方法,设计了遥控过程的模拟攻击实验;最后提出104规约在电力行业应用的防护对策和建议。The paper analyzes the security of IEC60870-5-104(104)specifications for power system and points out that the key content of 104 protocol remote control to be attacked easily.Then three methods of the man in the middle(MITM)attack to 104 specifications are proposed and implemented.Finally the paper also proposes some efficient countermeasure to against the attack risk.

关 键 词：工控安全 IEC60870-5-104 遥控 中间人攻击 

分 类 号：TP393[自动化与计算机技术—计算机应用技术] TM711[自动化与计算机技术—计算机科学与技术]