面向工控的协议解析方法应用研究  

Research on application of protocol analysis method for industrial control

作　　者：董健[1] 韩鹏军 Dong Jian;Han Pengjun(The Third Research Institute of Ministry of Public Security,Beijing 100004,China;CHN ENERGY,Beijing 100007,China)

机构地区：[1]公安部第三研究所,北京100004 [2]国家能源集团,北京100007

出　　处：《信息技术与网络安全》2021年第2期1-6,共6页Information Technology and Network Security

基　　金：信息网络安全公安部重点实验室开放课题项目(C19613)。

摘　　要：根据工控环境特点,通过分析现有的协议解析方法,提出了两种面向工控的协议解析方法,分别为针对网络通信数据包的网络报文序列解析法和基于对目标应用程序进行二进制分析的协议解析法,实现了对工控协议的语义级解析。最后进行了相关实验,证明了方法的有效性。According to the environmental characteristics of industrial control, this paper proposes two protocol analysis methods for industrial control protocols by analyzing the existing protocol analysis methods. One is the network message sequence analysis method based on network communication data packets, and the other is the protocol analysis method based on binary analysis of the target application. The semantic level analysis of industrial control protocol is realized. Finally, related experiments are carried out to prove the effectiveness of the methods.

关 键 词：工控协议 协议解析 逆向工程 

分 类 号：TP273[自动化与计算机技术—检测技术与自动化装置]