Uma ferramenta de manipulação de pacotes para análise de protocolos de redes industriais baseados em TCP/IP
AUTOR(ES)
Tiago Hiroshi Kobayashi
DATA DE PUBLICAÇÃO
2009
RESUMO
This work presents a packet manipulation tool developed to realize tests in industrial devices that implements TCP/IP-based communication protocols. The tool was developed in Python programming language, as a Scapy extension. This tool, named IndPM- Industrial Packet Manipulator, can realize vulnerability tests in devices of industrial networks, industrial protocol compliance tests, receive server replies and utilize the Python interpreter to build tests. The Modbus/TCP protocol was implemented as proof-of-concept. The DNP3 over TCP protocol was also implemented but tests could not be realized because of the lack of resources. The IndPM results with Modbus/TCP protocol show some implementation faults in a Programmable Logic Controller communication module frequently utilized in automation companies
ASSUNTO(S)
industrial protocols compliance tests modbus/tcp segurança em infraestrutura crítica, testes de conformidade de protocolos industriais segurança em redes industriais dnp3 sobre tcp engenharia eletrica modbus/tcp dnp3 over tcp industrial network security critical infrastructure security
Documentos Relacionados
- Protocolos TCP/IP para sistemas embarcados
- Avaliação de protocolos de roteamento multicast sobre redes TCP/IP
- Desenvolvimento de pilha de protocolos TCP/IP em sistema embarcado GPS.
- ARTIFICIAL NEURAL NETWORKS APPLIED TO INTRUSION DETECTION ON TCP/IP NETWORKS
- StatefulanalysisofTCP/IPnetworktrafficforintrusiondetectionapplication