工控设备固件提取技术综述  

Review on Technology for Extracting Firmware of Industrial Control Equipment

作　　者：林晔篁 刘蕾蕾 杜伟 彭纬伟[1,2] 金先涛 胡璇 LIN Yehuang;LIU Leilei;DU Wei;PENG Weiwei;JIN Xiantao;HU Xuan(China Southern Power Grid Peak and Frequency Modulation Power Generation Co.,Ltd.,Maintenance Test Branch,Guangzhou 510610,China;China Southern Power Grid Peak and Frequency Modulation Power Generation Company,Guangzhou 510635,China;CEPREI,Guangzhou 510610,China)

机构地区：[1]中国南方电网调峰调频发电有限公司检修试验分公司,广东广州510610 [2]中国南方电网调峰调频发电公司,广东广州510635 [3]工业和信息化部电子第五研究所,广东广州510610

出　　处：《电子产品可靠性与环境试验》2021年第1期89-93,共5页Electronic Product Reliability and Environmental Testing

摘　　要：为了了解对工业控制系统的潜在安全威胁,需要对工业控制系统现场设备进行逆向工程分析,查找隐藏的漏洞或后门。而工控设备逆向工程的第一步就是固件提取。通过分析工控设备固件的特点,归纳了工控固件提取过程中的重要和难点,并对工程上使用的9种固件提取方法进行了归纳分类。In order to understand the potential security threats to industrial control systems,it is necessary to conduct reverse engineering analysis on the field equipment of industrial control systems to find hidden loopholes or backdoors.And the first step of reverse engineering of industrial control equipment is firmware extraction.The important and difficult points in the process of extracting industrial control firmware are summarized by analyzing the characteristics of industrial control device firmware,and the nine firmware extraction methods used in engineering are classified.

关 键 词：工业控制系统 固件提取 逆向工程 工控设备 

分 类 号：TP23[自动化与计算机技术—检测技术与自动化装置]