Research on VxWorks System Vulnerability Mining and Security Assessment

Abstract

With the integration of information technology and industrialization, the Chinese manufacturing 2025 and other plans to implement, within the ICS began to introduce a large number of Internet technology. In improving efficiency at the same time, industrial control network " the myth of physical isolation" has gradually been broken, the security of ICS is facing a serious threat. At present, for the host computer operating system security research has been very mature, but for the underlying industrial embedded operating system security research is not yet mature. In this paper, for the traditional fuzzing method is not applicable to the ICS, the fuzzing based on the protocol reverse is proposed and implemented. And exploited the VxWorks operating system, the risk assessment method of the industrial network is also put forward.