基于的SCADA系统PLC固件完整性验证方法.PDFVIP

第43卷第6期 中国测试 Vol.43 No.6 2017年6月 CHINA MEASUREMENT TEST June袁2017 doi院10.11857/j.issn.1674-5124.2017.06.024 基于SHA1的SCADA系统PLC 固件完整性验证方法 1袁2 2 黄信兵 袁 刘桂雄 渊1.广东交通职业技术学院袁广东 广州 510800曰2.华南理工大学机械与汽车工程学院袁广东 广州 510640冤 摘 要院针对SCADA系统面临的数据窃取尧篡改等信息安全问题袁基于固件尧可信根完整性度量袁研究SCADA系统 PLC 固件完整的必要性曰采用安全性高的SHA1算法袁提出一种PLC 固件完整性验证方法遥 在SCADA系统外的验证 计算机上开发完整性验证软件袁通过网络侦听尧协议分析实现固件二进制数据提取尧待下载固件SHA1值匹配验证尧 下载固件SHA1值匹配验证等功能袁完成PLC固件传输过程中的完整性验证遥试验结果表明院该方法可有效验证PLC 固件完整性袁提高PLC运行可信度遥 关键词院安全哈希算法曰数据采集与监视控制系统曰可编程逻辑控制器曰固件曰完整性 文献标志码院A 文章编号院1674-5124渊2017冤06-0114-04 PLC firmware integrity verification method of SCADA system based on SHA1 1袁2 2 HUANG Xinbing 袁 LIU Guixiong 渊1.Guangdong Communication Polytechnic袁Guangzhou 510800袁China曰 2.School of Mechanical and Automotive Engineering袁South China University of Technology袁 Guangzhou 510640袁China冤 Abstract: For data theft袁 data tampering and other information security issues of SCADA system and based on integrity measurement of the firmware and the trusted root袁 this paper aimed to research the necessity of integrity of PLC firmware for SCADA system袁 and proposed a PLC firmware integrity verification method by using SHA1 algorithm with high security. It developed an integrity authentication software on an authentication computer which was independent from SCADA system. Through the network listening and protocol analysis 袁 the functions of the extraction of the firmware binary data袁 matched verification