Improved Modbus/TCP Multi-dimensional Fuzzing Test Method
Yi Mubai, Jingqi Fu · 2019
The security problem of industrial control network protocols has been widely concerned in the industrial field. Modbus/TCP is widely used in the industrial control networks and is vulnerable to denial of service and other vulnerabilities. The traditional test method of Modbus/TCP protocol only mutates a single field, and does not optimize the protocol format, which leads to the problems which caused by multi-dimensional input cannot be effectively tested and finally the test efficiency is low. In this paper, an improved variation region selection strategy and a Multi-dimensional fuzzing test method are proposed. A mutation factor database based on the mutation region selection strategy is constructed, and the range of fuzzing test variation is narrowed by means of multiple sequence alignment. At the same time, the adaptive mutation factor is added to make the selection of mutation data and fields more specific. Experimental results show that, comparing with the traditional method and Peach, the method introduced in this paper can effectively reduce redundancy and improve the testing efficiency.