MALWARE DETECTION METHOD FOR THE INDUSTRIAL CONTROL SYSTEMS

Industrial control system(ICS) is floorboard of control system in industrial production. With the transformation and upgrading of ICS, more IT technologies are used in it. The security problem has been paid more and more attention in recent years. In this paper, we proposed a fuzz test based method to detect the malware in the industrial control systems. In the proposed method, we use the configuration file of industrial control software as the taint source file of taint analysis and the sample file of fuzzing. First, find key data which is most likely to have potential safety hazard in the configuration file through dynamic taint analysis. Then, mutate the data and generate abnormal data file. Last, we do the fuzz test. By using this method, we can detect most of the security hazards