Hier finden Sie wissenschaftliche Publikationen aus den Fraunhofer-Instituten.

Advancing protocol fuzzing for industrial automation and control systems

: Pfrang, Steffen; Meier, David; Friedrich, M.; Beyerer, Jürgen


Mori, Paolo (Ed.) ; Institute for Systems and Technologies of Information, Control and Communication -INSTICC-, Setubal:
ICISSP 2018, 4th International Conference on Information Systems Security and Privacy. Proceedings. Vol.1: ForSE : Funchal, Madeira, Portugal, January 22-24, 2018
Setúbal: SciTePress, 2018
ISBN: 978-989-758-282-0
International Conference on Information Systems Security and Privacy (ICISSP) <4, 2018, Funchal>
International Workshop on Formal Methods for Security Engineering (ForSE) <2, 2018, Funchal>
Conference Paper
Fraunhofer IOSB ()
security testing; fuzzing; network protocol; IACS; Industrial Automation and Control System; vulnerability; device under test

Testing for security vulnerabilities is playing an important role in the changing domain of industrial automation and control systems. These systems are increasingly connected to each other via networking technology and are faced with new cyber threats. To improve the security properties of such systems, their robustness must be ensured. Security testing frameworks aim at enabling the assurance of robustness even at the time of development and can play a key role in bringing security into the industrial domain.\\ Fuzzing describes a technique to discover vulnerabilities in technical systems and is best known from its usage in IT security testing. It uses randomly altered data to provoke unexpected behaviour and can be used in combination with regular unit testing. Combined with the power of fuzzing, the effectiveness of security testing frameworks can be increased. In this work, different fuzzing tools were evaluated for their properties and then compared with the requirements for an application in the industrial domain. As no fuzzer was fully satisfying these requirements, a new fuzzer, combining the strength of different others, was designed and implemented, and then evaluated. The evaluation includes a real-world application where multiple vulnerabilities in industrial automation components could be identified.