The industrial control systems (ICS) is a core component of our country's important infrastructure, such as civil aviation, energy, power grid stations and traffic. In recent years, due to the occurrence of national ICS attacks such as "Stuxnet", the world has paid more attention to the security of it. At present, all civil aviation ICS are operating in physical isolation. However, from the perspective of the development of the smart civil aviation and the 14 five-year civil aviation plan, the ICS will focus on the efficient collaboration between systems and evolve in the operation mode of interconnection. The overall safety protection of the ICS will become the key to the safe and efficient operation of civil aviation. In this paper, we introduce four classic civil aviation ICS, and build a simulation industrial platform for vulnerability mining and testing. Then, we propose a vulnerability mining framework based on the Sequence Generation Adversarial Network (SeqGAN) and Peach, and develop a prototype system based on Peach open source libraries, which includes a new service-based exception monitoring method. Finally, we deployed the prototype system to the platform and discovered two zero-day vulnerabilities that causes the ICS denial of service and data overflow.


    Access

    Check access

    Check availability in my library

    Order at Subito €


    Export, share and cite



    Title :

    Civil Aviation Industrial Control Systems Vulnerability Mining Based on Fuzzing Technology


    Contributors:
    Gong, Li (author) / Ban, Xinbo (author) / He, Long (author) / Li, Jiasheng (author) / Deng, Shengji (author) / Zhang, Yi (author)


    Publication date :

    2023-10-11


    Size :

    3222058 byte




    Type of media :

    Conference paper


    Type of material :

    Electronic Resource


    Language :

    English



    Consumer UAV Cybersecurity Vulnerability Assessment Using Fuzzing Tests

    Rudo, David / Zeng, Kai | ArXiv | 2020

    Free access

    Civil aviation

    Hulbert, N.J. | Engineering Index Backfile | 1927


    CIVIL AVIATION

    Emerald Group Publishing | 1943


    Civil aviation

    Engineering Index Backfile | 1929