KR20210088794A - System and method for verifying vulnerability test results in consideration of industrial control system operating environment - Google Patents

Abstract

The present invention relates to a system and method for verifying vulnerability test results in consideration of an industrial control operating environment. The system encrypts a report including a test result received from a tester, transmits the encrypted report to a result management server, and deletes the generated test result, so as to block external exposure of test results, protect all data related to test results from the external exposure, and make the test results reliable.

Description

System and method for verifying vulnerability test results in consideration of industrial control system operating environment}

The present invention relates to a system and method for verifying a vulnerability test result in consideration of an industrial control system operating environment. By encrypting a report containing the test result input from a tester, transmitting it to the result management server, and deleting the generated test result, the test result is transmitted to the outside. It relates to a vulnerability test result confirmation system and method in consideration of the industrial control system operating environment that blocks exposure, protects all data related to test results from external exposure, and makes test results reliable.

Recently, cyber attacks on infrastructure have occurred by exploiting vulnerabilities in infrastructure components. In particular, in the case of industrial control systems that are built and introduced in infrastructure, there are weaknesses according to the characteristics of industrial control systems in addition to weaknesses that exist in general IT systems.

The prior art, Korean Patent Registration No. 10-1651586, "Security Vulnerability Management System Found in the System Development Stage and System Operation Stage" is a system that allows information system managers and security administrators to register security vulnerabilities discovered in the system development stage and system operation stage. Although technology is being disclosed to allow the smooth management of the process up to the completion of measures, there are security vulnerabilities such as the exposure of test results and vulnerability information in a space accessible to many network users as a general IT system environment. However, the technology to protect such information that can be abused by an attacker is not included, and it is very important to prevent such information from being exposed, especially in an industrial control system environment. Therefore, there is a need for a test support system and method that can protect data related to test results from external exposure.

Korean Patent Registration No. 10-1651586

The present invention protects all data related to the test result from external exposure by encrypting the report including the test result input from the tester, transmitting it to the result management server, and deleting the generated test result, thereby blocking the external exposure of the test result. The purpose is to make the results reliable.

The present invention uses a hash value to receive a test result corresponding to a hash value, and after confirming that the hash value is consistent, transmit the test result to a test support tool, thereby making it impossible to forge or falsify in the process of transmitting and receiving test results and evidence do it with

An object of the present invention is to use only an authenticated test tool that is not forged or tampered with by verifying the integrity using a random number value.

In the present invention, the test support tool is connected through the internal network, and the result management server is connected through the external network, so that the vulnerability information of the control system environment, including sensitive information, is minimized to the external exposure point, and the tester's intentional or unintentional export It is intended to protect against

The present invention is to prevent leakage of test results and data that may occur due to the tester's mistake, etc., and to secure reliability by granting the authority of the tester by role and inquiring only the user himself and the tool used by the user. aim to do

In order to achieve this object, the test support system, which is a vulnerability test result confirmation system in consideration of the industrial control system operating environment according to an embodiment of the present invention, includes a test support tool authentication unit that certifies a test support tool that receives test results from a tester; When the test support tool is authenticated, the test result receiver receives and stores the test results from the test support tool. When the test results are stored, the test support tool succeeds in sending a message instructing the user to delete the test results A message transmission unit, a report generation unit generating a report based on one or more of the stored test results, and encrypting the generated report and the test result included in the report, and transmitting the generated report and the test result included in the report to the result management server, the generated report and the It may be configured to include a report transmission unit for deleting the test results included in the report.

Also, in response to the test result request receiving unit receiving the test result request from the test support tool and the test result request information, the test result corresponding to the test result request is received from the result management server, and the received test result may be configured to further include a result inquiry unit for transmitting the to the test support tool.

In addition, the test result receiving unit further receives a hash value corresponding to the test result from the test support tool, and when the test support tool receives a message instructing to delete the test result, the test result excluding the hash value and the test result request receiving unit receives a hash value corresponding to the test result request from the test support tool, and the result inquiry unit receives the test result corresponding to the hash value from the result management server, After confirming that the values match, the test result may be transmitted to the test support tool.

In addition, the test support tool authenticator receives authentication information from the test support tool, authenticates the test support tool, generates a random number value when authenticated, and transmits it to the test support tool, and the random number value from the test support tool It may be configured by receiving a verification value generated on the basis of , and verifying the integrity of the test support tool.

In addition, the test support tool may be configured to be connected through an internal network, and the result management server may be configured to be connected via an external network.

In addition, a test result input unit that receives the test result from the tester, an authentication processing unit that transmits authentication information to the test support server and receives an authentication confirmation from the test support server, and when the authentication confirmation is received, sends the test result to the test support server It may be configured to include a test result transmission unit for transmitting and storing the test result and a test result deletion unit for deleting the test result when receiving a message indicating that the test result is stored from the test support server.

In addition, the test result request transmission unit for transmitting the test result request to the test support server, and a test result confirmation unit for receiving the test result corresponding to the test result request from the test support server can be configured as have.

In addition, the test result transmission unit generates a hash value for the test result and transmits it together with the test result, and when the test result deletion unit receives a message indicating that the test result is stored, the test result excluding the hash value The test result request transmission unit transmits a hash value corresponding to the test result request together with the test result request, and the test result confirmation unit receives the test result verified based on the hash value in the test support server It can be configured as characterized in that

In addition, the authentication processing unit receives the random number value generated by the test support server, transmits the verification value generated based on the random number value to the test support server, and the integrity verification result confirmed based on the verification value It may be configured to receive.

The present invention protects all data related to the test result from external exposure by encrypting the report including the test result input from the tester, transmitting it to the result management server, and deleting the generated test result, thereby blocking the external exposure of the test result. Make the results reliable.

The present invention uses a hash value to receive the test result corresponding to the hash value, and after confirming that the hash value matches, transmit the test result to the test support tool, so that forgery and falsification is impossible in the process of transmitting and receiving test results and evidence.

The present invention uses only an authenticated test tool that is not forged or tampered with by verifying the integrity using a random number value.

In the present invention, the test support tool is connected through the internal network, and the result management server is connected through the external network, so that the vulnerability information of the control system environment, including sensitive information, is minimized to the external exposure point, and the tester's intentional or unintentional export to protect it from

The present invention secures the reliability of test results and data that may occur due to the tester's mistake by granting the authority of the tester to each role and allowing the user to inquire about his/her work only from the user himself and the tools used by the user.

1 is a diagram illustrating an example of a vulnerability management system according to an embodiment of the present invention.
FIG. 2 is a diagram illustrating a configuration in which a test support tool and a result management server are connected in a vulnerability test result confirmation system in consideration of an industrial control system operating environment according to an embodiment of the present invention.
3 is a diagram illustrating a configuration diagram in a test support server of a vulnerability test result confirmation system in consideration of an industrial control system operating environment according to an embodiment of the present invention.
4 is a diagram illustrating an example of authenticating a test support tool according to an embodiment of the present invention.
5 is a diagram illustrating an example of receiving a test result from a tester according to an embodiment of the present invention.
6 is a diagram illustrating an example of generating a report by storing test results according to an embodiment of the present invention and deleting the generated report and test results included in the report.
7 is a diagram illustrating an example of receiving a test result request from a test support tool according to an embodiment of the present invention.
8 is a diagram illustrating an example of transmitting a test result to a test support tool and inquiring the result according to an embodiment of the present invention.
9 is a diagram illustrating a flow chart of a method for confirming a vulnerability test result in consideration of an industrial control system operating environment according to an embodiment of the present invention.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In describing the present invention, if it is determined that a detailed description of a related known configuration or function may obscure the gist of the present invention, the detailed description thereof will be omitted. In addition, in describing the embodiments of the present invention, specific numerical values are merely examples and the scope of the invention is not limited thereby.

The vulnerability test result confirmation system in consideration of the industrial control system operating environment according to the present invention has a central processing unit (CPU) and memory (Memory) and is configured in the form of a server that can be connected to other terminals through a communication network such as the Internet can be However, the present invention is not limited by the configuration of the central processing unit and the memory. In addition, the vulnerability test result confirmation system in consideration of the industrial control system operating environment according to the present invention may be physically configured as one device or may be implemented in a distributed form among a plurality of devices, so that the present invention provides such a physical It is not limited by the configuration of the device.

1 is a diagram illustrating an example of a vulnerability management system according to an embodiment of the present invention.

Recently, cyber attacks on infrastructure have occurred by exploiting vulnerabilities in infrastructure components. In particular, in the case of industrial control systems that are built and introduced in infrastructure, there are weaknesses according to the characteristics of industrial control systems in addition to weaknesses that exist in general IT systems.

V Rheinland는 ISCI의 ISASecure EDSA 프로그램을 도입, T

V S

D는 IEC 62443-4-1 표준에 따라 구성요소 제조사의 안전한 제조과정에 대한 인증을 운영하고 있다. In order to protect industrial control systems from these vulnerabilities, countries around the world are operating systems to check the security of control systems. In the United States, ISCI (ISA Security Conformance Institute)'s ISASecure Embedded Device Security Assurance (EDSA) program and GE's Achilles Communication Robustness certification are available. In Japan, CSSC (Control System Security Center) is introducing ISCI's ISASecure EDSA program. German T.

V Rheinland introduces ISCI's ISASecure EDSA program, T

VS

D operates certification for the safe manufacturing process of component manufacturers according to the IEC 62443-4-1 standard.

In this process, in checking and testing the cyber security vulnerabilities of the industrial control system, the person in charge of the test directly records the security requirements set at the site, organizes them, and prepares a result report. In the United States, tools such as CSET that can be used to perform tests according to similar NERC (North American Power Reliability Company) CIP (Critical Infrastructure Protection) items are being developed and operated.

In the vulnerability test for cyber security in such an industrial control system, there are things to be aware of, unlike the test in general IT systems. In general, the control system is an environment connected with sensors for facility control and physical actuators (actuators), and when damage occurs such as cyberattacks that exploit vulnerabilities, there is a great ripple effect. In particular, in the case of the control system in the infrastructure, severe social confusion can cause

As such, information related to the operation inside the control system is often very sensitive and management is essential. However, in the domestic environment where information is thoroughly managed through network separation in the prior art, information leakage to the outside may occur due to an unintentional error of the tester during the test process. If the vulnerability test result performed by the tester is exposed, the attacker can use it immediately, resulting in much greater damage than general control system information exposure. Also, in the prior art, although many proposals have been made for an automated process for checking vulnerabilities, the improvement of security for vulnerability testing itself or result management is relatively insufficient.

In the present invention, the test support tool, test support server, and result management server may be configured to perform encryption communication such as TLS in network communication, respectively.

The test support tool is a client-type S/W used by testers during vulnerability testing, and testers can directly use the support tool to write and input test results in the field. To this end, the test support tool shows the tester the security requirement item to be tested received from the test support server, and the tester can input the result according to the item and transmit it to the support server. After the test support tool transmits the results entered by the tester to the test support server, the stored records can be completely deleted.

The test support server may collect test results transmitted by the tester through the test support tool and generate a report. In this process, the test support server verifies the integrity of the test support tool during the authentication process, blocks access to the unauthorized tool, and generates and transmits a key to be used during the result input process. In addition, the test result data and report collected in the test support server can be encrypted and transmitted to the result management server, and a function to delete it after transmission can be provided. The result management server may provide a function to store the encrypted data transmitted from the test support server.

An example of the system 110 for managing vulnerabilities in a communication environment through a dedicated line or VPN using this configuration can be seen. It can be transmitted from the test site to which the test subject control system and test support tool belong to the test center through communication through a dedicated line or VPN, and the received test result value can be transmitted to the test support server, and the test support server can be transmitted to the test management server. have.

In addition, an example of the system 120 for managing vulnerabilities in a network separation environment can be seen. It may consist of a test site containing the test subject control system, test support tool, and test support server, and a testing laboratory including the test support server and result management server. Results can be stored in the confirmation support server after completion of the test in the test support tool at the test site, and the test support server in which the results are stored can be safely transferred to the test support server of the testing institution. In addition, the test support server of the test institution may delete the data from the test support server of the test institution after sending the encrypted result to the result management server.

FIG. 2 is a diagram illustrating a configuration in which a test support tool and a result management server are connected in a vulnerability test result confirmation system in consideration of an industrial control system operating environment according to an embodiment of the present invention.

The test support system, which is a vulnerability test result confirmation system in consideration of the industrial control system operating environment according to the present invention, includes a test support tool authenticator 110 , a test result receiver 120 , a success message transmitter 130 , and a report generator 140 . ), report transmission unit 150, test result request receiving unit 160, result inquiry unit 170, test result input unit 210, authentication processing unit 220, test result transmission unit 230, test result deletion unit ( 240), the test result request transmission unit 250, and the test result confirmation unit 260 may be configured, and each component may be a software module that operates in the same computer system physically, and physically two or more It may be in a form configured so that the separated computer systems can operate in conjunction with each other, and various embodiments including the same function fall within the scope of the present invention.

The test support tool authentication unit 110 authenticates the test support tool that receives the test result from the tester.

The test support tool authenticator 110 may authenticate the test support tool, and the test support tool may receive a test result from the tester. The tester may write or input the test result by using the support tool, and the test support tool authentication unit 110 may authenticate the support tool that receives the test result written or input by the tester. The tester may try to log in to use the support tool, and the test support tool authenticator 110 may authenticate the tester.

The test support tool authentication unit 110 receives authentication information from the test support tool and authenticates the test support tool.

The test support tool authenticator 110 may receive authentication information from the test support tool. The authentication information may be user authentication information, and the user authentication information may be a user ID, a password entered by the user, and a support tool ID. The test support tool authenticator 110 may receive authentication information from the test support tool to authenticate the test support tool. The test support tool authenticator 110 may authenticate the test support tool based on the user's authentication information. The test support tool authenticator 110 may authenticate the test support tool and the user from the test support tool.

When the test support tool is authenticated, the test support tool authentication unit 110 generates a random number value and transmits it to the test support tool.

When the test support tool and the user are authenticated, the test support tool authenticator 110 may generate an authentication result and a random number value required to generate the user's verification value. The random number value generated by the test support tool authenticator 110 may be transmitted to the test support tool. The test support tool may generate an authentication result and a user's verification value based on the random number value received from the test support tool authenticator 110 .

The test support tool authenticator 110 receives the verification value generated based on the random number value from the test support tool and verifies the integrity of the test support tool.

The test support tool authenticator 110 may receive a random number value and a verification value from the test support tool, and the verification value may be a verification value for integrity verification. The test support tool authenticator 110 may verify the integrity of the support tool from the random number value and the verification value received from the test support tool.

When the test support tool is authenticated, the test result receiver 120 receives and stores the test result from the test support tool.

When the test support tool is authenticated by the test support tool authenticator 110 , the test result receiver 120 may receive a test result value from the test support tool. When the test support tool is authenticated by the test support tool authenticator 110 , the test result receiver may store a test result value from the test support tool.

The test result receiving unit 120 further receives a hash value corresponding to the test result from the test support tool.

The test result receiver 120 may receive a hash value generated by the test support tool. The test result receiver may receive the encryption and hash values corresponding to the test results from the test support tool.

When the test result is stored, the success message transmitter 130 transmits a message guiding the deletion of the test result from the test support tool.

When the test result is stored in the test result receiver 120 , the success message transmitter 130 may transmit a message of a command to delete the test result from the test support tool.

When the test support tool receives a message instructing to delete the test result, it deletes the test result except for the hash value.

When the test support tool receives a message instructing to delete the test result from the success message transmitting unit 130 , it may delete the test result except for the hash value. The test result may include the project ID of the test, tool ID (all tools that transmitted the result), encrypted result data and report, transmission time information, and hash value.

The report generating unit 140 generates a report based on one or more stored test results.

The report generating unit 140 generates a report based on one or more of the project ID of the test that is the test result, the tool ID (all tools that have transmitted the results), encrypted result data and report, transmission time information, and hash value. can

The report transmission unit 150 encrypts the generated report and the test result included in the report, and transmits it to the result management server, and deletes the generated report and the test result included in the report.

The report transmission unit 150 may transmit the report generated by the report generation unit 140 to the result management server, and may encrypt the test result included in the report and transmit it to the result management server. The report transmission unit 150 may delete the generated report and the test result included in the report after encrypting the report and the test result included in the report and transmitting it to the result management server.

The test result request receiving unit 160 receives a test result request from the test support tool.

The test result request receiving unit 160 may receive test result request information for requesting one or more values among test results from the test support tool. The test result request may be information requesting information about the test result, and the test result request receiving unit 160 may receive the test result request from the test support tool.

The test result request receiving unit 160 may receive a test result request from the test support tool, and before receiving the test result request from the test support tool, the test result request information to be received from the test support tool and a report corresponding to the report and report. If you have included test results, you may not receive a request for test results. The test result request receiving unit 160 may receive a test result request when it does not have a report corresponding to the test result request information to be received and a test result included in the report.

The test result request receiving unit 160 receives a hash value corresponding to the test result request from the test support tool.

The test result request receiving unit 160 may receive a hash value corresponding to the test result request from the test support tool. The test support tool unit may check a hash value corresponding to the test result request, and transmit it to the test result request receiving unit 160 . The test result request receiving unit 160 may receive a hash value corresponding to the test result request from the test support tool.

The result inquiry unit 170 receives the test result corresponding to the test result request from the result management server in response to the test result request information, and transmits the received test result to the test support tool.

The result inquiry unit 170 may receive the test result corresponding to the test result request from the result management server in response to the test result information corresponding to the test result request received from the test result request receiving unit 160 . The result inquiry unit 170 may transmit the test result corresponding to the test result request received from the result management server to the test support tool.

The result inquiry unit 170 receives the test result corresponding to the hash value from the result management server, checks whether the hash value matches, and then transmits the test result to the test support tool.

The result inquiry unit 170 may receive the test result corresponding to the hash value corresponding to the test result request from the result management server. The result inquiry unit 170 may check whether the hash value received from the test result request receiving unit 160 matches the hash value transmitted in the past, and if they match, transmit the test result to the test support tool.

The test support tool is connected through the internal network, and the result management server is connected through the external network.

The test support tool can be connected through the internal network, and the result management server can be connected through the external network. The test support tool connected through the internal network and the result management server connected through the external network can be connected by communicating with each other.

The test result input unit 210 receives the test result from the tester.

The test result input unit 210 may receive the test result from the tester. The tester may input the test result into the test result input unit 210 .

The authentication processing unit 220 transmits authentication information to the test support server and receives an authentication confirmation from the test support server.

The authentication processing unit 220 may transmit authentication information to the test support server. The authentication processing unit 220 may transmit tester information and authentication information to the test support server, and the tester information may be a user ID, a password input by the user, and a tool ID. The test support server may transmit authentication confirmation information to the authentication processing unit 220 by confirming that the tool or user registered in the server is correct, and the authentication processing unit 220 may receive an authentication confirmation from the test support server.

The authentication processing unit 220 receives the random number value generated by the test support server.

The authentication processing unit 220 may receive the random number value generated by the test support server. The test support server may generate a random number value necessary for generating an authentication result, user authority, and verification value, and may transmit it to the authentication processing unit 220 .

The authentication processing unit 220 transmits the verification value generated based on the random number value to the test support server, and receives the integrity verification result confirmed based on the verification value.

The test support server may generate a verification value for its own integrity verification based on the random number value, and may check the integrity verification result based on the verification value. As the software integrity verification technique, various techniques such as code signing using an electronic signature may be applied. The authentication processing unit 220 may receive the integrity verification result confirmed by the test support server.

When the authentication confirmation is received, the test result transmission unit 230 transmits and stores the test result to the test support server.

When receiving the authentication confirmation from the authentication processing unit 220, the test result transmission unit 230 may transmit and store the test result to the test support server.

The test result transmission unit 230 generates a hash value for the test result and transmits it together with the test result.

The test result transmission unit 230 may generate a hash value for the project ID, user ID, tool ID, work result, and the entire message, and transmit it together with the test result.

When the test result deletion unit 240 receives a message indicating that the test result is stored from the test support server, it deletes the test result.

The test result deletion unit 240 may delete the test result when the test result transmission unit 230 receives a message indicating that the test result is stored from the test support server. The test result deletion unit 240 may delete the test result from the test support tool upon receiving a message indicating that the test result is stored from the test support server.

When the test result deletion unit 240 receives a message indicating that the test result is stored, it deletes the test result except for the hash value.

When the test result transmission unit 230 receives a message indicating that the test result is stored from the test support server, the test result deletion unit 240 may delete the test result except for the hash value. When the test result deletion unit 240 receives a message indicating that the test result is stored from the test support server, it may delete the test result excluding the hash value from the test support tool.

The test result request transmission unit 250 transmits a test result request to the test support server.

The test result request transmitter 250 may transmit test result request information including one or more values among test results to the test support server. The test result request may be information requesting information about the test result, and the test result request transmitter 250 may transmit the test result request to the test support server.

The test result request transmission unit 250 transmits a hash value corresponding to the test result request together with the test result request.

The test result request transmitter 250 may transmit test result request information including one or more values including a hash value among test results to the test support server. The test result request may be information requesting information about the test result, and the test result request transmitter 250 may transmit a hash value corresponding to the test result request to the test support server together with the test result request.

The test result request transmission unit 250 may transmit information on this to the test support server along with a request when the test support server requires a previous work history, and at this time, the previous content is the corresponding project ID, user ID, tool ID, and requested information. It may be a hash value of information. The test support server may check whether the content requested by the test result request transmission unit 250 is stored in the test support server. If it is not stored in the test support server, the test support server can check whether the hash value corresponding to the test result request is correct, and can find the hash value included in the test result request information.

The test result confirmation unit 260 receives the test result corresponding to the test result request from the test support server.

The test result check unit 260 may receive the test result corresponding to the test result request from the test support server.

The test result confirmation unit 260 receives the test result verified based on the hash value from the test support server.

The test result check unit 260 may receive the test result verified based on the information confirming whether the hash value corresponding to the test result request is correct. The test result confirmation unit 260 may provide a test result verified based on the hash value so that the administrator can see it, and the administrator may provide a function to check it on a screen and output it if necessary.

3 is a diagram illustrating a configuration diagram in a test support server of a vulnerability test result confirmation system in consideration of an industrial control system operating environment according to an embodiment of the present invention.

The test result input unit 210 receives the test result from the tester.

The test result input unit 210 may receive the test result from the tester. The tester may input the test result into the test result input unit 210 .

The authentication processing unit 220 transmits authentication information to the test support server and receives an authentication confirmation from the test support server.

The authentication processing unit 220 may transmit authentication information to the test support server. The authentication processing unit 220 may transmit tester information and authentication information to the test support server, and the tester information may be a user ID, a password input by the user, and a tool ID. The test support server may transmit authentication confirmation information to the authentication processing unit 220 by confirming that the tool or user registered in the server is correct, and the authentication processing unit 220 may receive an authentication confirmation from the test support server.

The authentication processing unit 220 receives the random number value generated by the test support server.

The authentication processing unit 220 may receive the random number value generated by the test support server. The test support server may generate a random number value necessary for generating an authentication result, user authority, and verification value, and may transmit it to the authentication processing unit 220 .

The authentication processing unit 220 transmits the verification value generated based on the random number value to the test support server, and receives the integrity verification result confirmed based on the verification value.

The test support server may generate a verification value for its own integrity verification based on the random number value, and may check the integrity verification result based on the verification value. As the software integrity verification technique, various techniques such as code signing using an electronic signature may be applied. The authentication processing unit 220 may receive the integrity verification result confirmed by the test support server.

When the authentication confirmation is received, the test result transmission unit 230 transmits and stores the test result to the test support server.

When receiving the authentication confirmation from the authentication processing unit 220, the test result transmission unit 230 may transmit and store the test result to the test support server.

The test result transmission unit 230 generates a hash value for the test result and transmits it together with the test result.

The test result transmission unit 230 may generate a hash value for the project ID, user ID, tool ID, work result, and the entire message, and transmit it together with the test result.

When the test result deletion unit 240 receives a message indicating that the test result is stored from the test support server, it deletes the test result.

The test result deletion unit 240 may delete the test result when the test result transmission unit 230 receives a message indicating that the test result is stored from the test support server. The test result deletion unit 240 may delete the test result from the test support tool upon receiving a message indicating that the test result is stored from the test support server.

When the test result deletion unit 240 receives a message indicating that the test result is stored, it deletes the test result except for the hash value.

When the test result transmission unit 230 receives a message indicating that the test result is stored from the test support server, the test result deletion unit 240 may delete the test result except for the hash value. When the test result deletion unit 240 receives a message indicating that the test result is stored from the test support server, it may delete the test result excluding the hash value from the test support tool.

The test result request transmission unit 250 transmits a test result request to the test support server.

The test result request transmitter 250 may transmit test result request information including one or more values among test results to the test support server. The test result request may be information requesting information about the test result, and the test result request transmitter 250 may transmit the test result request to the test support server.

The test result request transmission unit 250 transmits a hash value corresponding to the test result request together with the test result request.

The test result request transmitter 250 may transmit test result request information including one or more values including a hash value among test results to the test support server. The test result request may be information requesting information about the test result, and the test result request transmitter 250 may transmit a hash value corresponding to the test result request to the test support server together with the test result request.

The test result request transmission unit 250 may transmit information on this to the test support server along with a request when the test support server requires a previous work history, and at this time, the previous content is the corresponding project ID, user ID, tool ID, and requested information. It may be a hash value of information. The test support server may check whether the content requested by the test result request transmission unit 250 is stored in the test support server. If it is not stored in the test support server, the test support server can check whether the hash value corresponding to the test result request is correct, and can find the hash value included in the test result request information.

The test result confirmation unit 260 receives the test result corresponding to the test result request from the test support server.

The test result check unit 260 may receive the test result corresponding to the test result request from the test support server.

The test result confirmation unit 260 receives the test result verified based on the hash value from the test support server.

The test result check unit 260 may receive the test result verified based on the information confirming whether the hash value corresponding to the test result request is correct. The test result confirmation unit 260 may provide a test result verified based on the hash value so that the administrator can see it, and the administrator may provide a function to check it on a screen and output it if necessary.

4 is a diagram illustrating an example of authenticating a test support tool according to an embodiment of the present invention.

The test support tool authentication unit 110 authenticates the test support tool that receives the test result from the tester.

The test support tool authenticator 110 may authenticate the test support tool, and the test support tool may receive a test result from the tester. The tester may write or input the test result by using the support tool, and the test support tool authentication unit 110 may authenticate the support tool that receives the test result written or input by the tester. The tester may try to log in to use the support tool, and the test support tool authenticator 110 may authenticate the tester.

The test support tool authentication unit 110 receives authentication information from the test support tool and authenticates the test support tool.

When the test support tool is authenticated, the test support tool authentication unit 110 generates a random number value and transmits it to the test support tool.

The test support tool authenticator 110 receives the verification value generated based on the random number value from the test support tool and verifies the integrity of the test support tool.

The test result input unit 210 receives the test result from the tester.

The test result input unit 210 may receive the test result from the tester. The tester may input the test result into the test result input unit 210 .

The authentication processing unit 220 transmits authentication information to the test support server and receives an authentication confirmation from the test support server.

The authentication processing unit 220 may transmit authentication information to the test support server. The authentication processing unit 220 may transmit tester information and authentication information to the test support server, and the tester information may be a user ID, a password input by the user, and a tool ID. The test support server may transmit authentication confirmation information to the authentication processing unit 220 by confirming that the tool or user registered in the server is correct, and the authentication processing unit 220 may receive an authentication confirmation from the test support server.

The authentication processing unit 220 receives the random number value generated by the test support server.

The authentication processing unit 220 transmits the verification value generated based on the random number value to the test support server, and receives the integrity verification result confirmed based on the verification value.

If you want to use the test support tool, you can use it after certification.

For example, in the test support tool authentication unit 110 or the authentication processing unit 220 , the tester may try to log in to use the support tool. The test support tool may transmit the user ID, the PW entered by the user, and the tool ID to the test support server. The test support server can check whether the registered tool and user are correct, and the test support server can transmit the authentication result and a random number required to generate the user's authorization verification value to the support tool. The test support tool may generate a verification value for its own integrity verification. The random number value received in the verification value generation process can be utilized, and various techniques such as code signing using an electronic signature can be applied as the software integrity verification technique. The test support tool can transmit the generated integrity verification value. The test support server may transmit the verification result to the test support tool, and the test support tool may determine whether the tester passes the certification according to the received result. The test support tool may provide functions according to the user's authority received from the test support server.

5 is a diagram illustrating an example of receiving a test result from a tester according to an embodiment of the present invention.

When the test support tool is authenticated, the test result receiver 120 receives and stores the test result from the test support tool.

When the test support tool is authenticated by the test support tool authenticator 110 , the test result receiver 120 may receive a test result value from the test support tool. When the test support tool is authenticated by the test support tool authenticator 110 , the test result receiver may store a test result value from the test support tool.

The test result receiving unit 120 further receives a hash value corresponding to the test result from the test support tool.

When the authentication confirmation is received, the test result transmission unit 230 transmits and stores the test result to the test support server.

When receiving the authentication confirmation from the authentication processing unit 220, the test result transmission unit 230 may transmit and store the test result to the test support server.

The test result transmission unit 230 generates a hash value for the test result and transmits it together with the test result.

When the test result deletion unit 240 receives a message indicating that the test result is stored from the test support server, it deletes the test result.

When the test result deletion unit 240 receives a message indicating that the test result is stored, it deletes the test result except for the hash value.

After the certification process is completed, the tester can enter the test results. The test support tool guides the tester with the security requirements and test items necessary for vulnerability testing, and the tester can input the results. At this time, the temporary file saved in the intermediate process is encrypted and stored using the key transmitted by the test support server during the authentication process, and after transmission to the test support server after completion, all results are deleted from the test support tool to expose the result data. possibility can be minimized. The items to be used in the vulnerability test (control system, security requirements, test items, etc.) are provided by the tool, and if it is not stored in the tool, it can be received by accessing the support server and requesting it. The test support tool can support the function of restricting the access right for each user so that only the function corresponding to the user's authority authenticated during the authentication process is used.

For example, the tester can recognize the items to be checked for vulnerability testing through the test support tool and perform the work, and directly input the results into the test support tool. Evidence may be attached if necessary. When the tester has finished working, he can check the network connection and issue commands to save and send results. The test support tool can transmit all the work to the test support server. At this time, it is possible to generate a hash value for the project ID, user ID, tool ID, work result and the entire message, attach the hash value, and transmit it. The test support server may temporarily store the requested content. If necessary, the test support server can collect and temporarily store the data transmitted from various tools. The test support server may transmit a save success message to the test support tool. When the support tool receives the success message, it can completely delete all result data and evidence except for the generated hash value. After deletion is completed, the tester can log out from the test support tool.

6 is a diagram illustrating an example of generating a report by storing test results according to an embodiment of the present invention and deleting the generated report and test results included in the report.

The report generating unit 140 generates a report based on one or more stored test results.

The report generating unit 140 generates a report based on one or more of the project ID of the test that is the test result, the tool ID (all tools that have transmitted the results), encrypted result data and report, transmission time information, and hash value. can

The report transmission unit 150 encrypts the generated report and the test result included in the report, and transmits it to the result management server, and deletes the generated report and the test result included in the report.

The test support server may be included in the test support tool, and the test support tool is connected to the internal network and may communicate with the result management server of the external network. The test support server can be connected with the test support tool and the result management server at the same time, or in a network separation environment, only the support tool is connected and can be connected to the result management server after all tests are completed. The test support server manages the results transmitted by the test support tool according to the configuration environment, and it can be encrypted and transmitted to the result management server at the request of the administrator or periodically and deleted. If the result management server is separated after all tests have been completed, test results and data are stored in an encrypted environment in a separate environment, and data are not left in the test support tool and test support server, so you can manage them safely.

For example, a test support server or test support tool can verify that materials are being received from all users. The test support server or test support tool may collect all the results when confirming receipt of data. The report generation unit 140 of the test support server or test support tool generates a report according to the collected results. Encryption and hash values are generated for the aggregated results and the generated report (however, this process can be performed periodically or upon request according to the administrator's settings even before report generation). The test support server or test support tool transmits the project ID of the test, tool ID (all tools that transmitted results), encrypted result data and report, transmission time information, and the hash value generated above to the result management server. The result management server securely stores the received information. The result management server sends a storage success message to the test support server or test support tool. The test support server or test support tool deletes the test results and reports after receiving the save success message.

7 is a diagram illustrating an example of receiving a test result request from a test support tool according to an embodiment of the present invention.

The test result request receiving unit 160 receives a test result request from the test support tool.

The test result request receiving unit 160 may receive test result request information for requesting one or more values among test results from the test support tool. The test result request may be information requesting information about the test result, and the test result request receiving unit 160 may receive the test result request from the test support tool.

The test result request receiving unit 160 may receive a test result request from the test support tool, and before receiving the test result request from the test support tool, the test result request information to be received from the test support tool and a report corresponding to the report and report. If you have included test results, you may not receive a request for test results. The test result request receiving unit 160 may receive a test result request when it does not have a report corresponding to the test result request information to be received and a test result included in the report.

The test result request receiving unit 160 receives a hash value corresponding to the test result request from the test support tool.

The test result request transmission unit 250 transmits a test result request to the test support server.

The test result request transmitter 250 may transmit test result request information including one or more values among test results to the test support server. The test result request may be information requesting information about the test result, and the test result request transmitter 250 may transmit the test result request to the test support server.

The test result request transmission unit 250 transmits a hash value corresponding to the test result request together with the test result request.

If necessary, the tester may need the content previously written by him/herself. The data stored by the test support tool or test support server may be deleted from the test support tool and need to be transmitted again from the test support server.

For example, if the test support tool requires a previous work history, the test support server may request information about it. In this case, the previous content may be a hash value of the project ID, user ID, tool ID, and requested information. The test support server can check whether the content requested by the test support tool is stored on the server. If it is not, the test support server receives the content, checks whether the hash value sent in the past is correct, and a hash containing the requested content. value can be found. The result management server can find the encrypted data corresponding to the project ID and hash value and transmit it to the test support server. The test support server may decrypt the encrypted data containing the requested information by the test support tool. The test support server may separate the information requested by the test support tool from among the data. The test support server may generate a hash value by gathering information transmitted by test support tools in the past. The test support server can check whether the hash value transmitted by the test support tool matches the generated hash value. If the hash values match, the test support server transmits the information to the test support tool and deletes all data sent to the result management server.

In addition, the test support server checks whether the information requested by the test support tool is stored in the server, and if it is being saved, the test support server can separate the information requested by the test support tool from among the data. The test support server may generate a hash value by gathering information transmitted by test support tools in the past. The test support server can check whether the hash value transmitted by the test support tool matches the generated hash value. If the hash values match, the test support server transmits the information to the test support tool and deletes all data sent to the result management server.

8 is a diagram illustrating an example of transmitting a test result to a test support tool and inquiring the result according to an embodiment of the present invention.

The result inquiry unit 170 receives the test result corresponding to the test result request from the result management server in response to the test result request information, and transmits the received test result to the test support tool.

The result inquiry unit 170 may receive the test result corresponding to the test result request from the result management server in response to the test result information corresponding to the test result request received from the test result request receiving unit 160 . The result inquiry unit 170 may transmit the test result corresponding to the test result request received from the result management server to the test support tool.

The result inquiry unit 170 receives the test result corresponding to the hash value from the result management server, checks whether the hash value matches, and then transmits the test result to the test support tool.

The result inquiry unit 170 may receive the test result corresponding to the hash value corresponding to the test result request from the result management server. The result inquiry unit 170 may check whether the hash value received from the test result request receiving unit 160 matches the hash value transmitted in the past, and if they match, transmit the test result to the test support tool.

The test result confirmation unit 260 receives the test result corresponding to the test result request from the test support server.

The test result confirmation unit 260 receives the test result verified based on the hash value from the test support server.

In the case of an administrator among testers or users of the test support tool, the report or result report generated by the test support server or the report generator 140 may be inquired and modified.

For example, after completing the administrator certification process in the test support tool, you can request a project ID and result report from the test support server. The test support server can check whether the requested project results and reports are being saved in the support server. If it is not saved, the test support server can request all data for the project from the result management server. The result management server may transmit the requested information to the test support server. The test support server can decrypt the received encrypted data. Check whether there is a generated result report among the information, and if other test result data is added after the previously generated result report, it can be understood that there is no result report. If there is no report, the test support server can generate a result report from the result data. The test support server can send the result report to the support tool and delete all data received from the result management server. The test support tool provides the received result report for the administrator to view, and the administrator provides the function to check it on the screen and print it out if necessary. The administrator logs out after completing the task in the support tool. Upon logout, the result report may be deleted from the test support tool.

In addition, after completing the administrator authentication process in the test support tool, you can request a project ID and result report from the test support server. The test support server can check whether the requested project results and reports are being saved in the support server. If it is stored, check whether there is a generated result report among the information, and if other test result data is added after the previously generated result report, it can be understood that there is no result report. If there is no report, the test support server can generate a result report from the result data. The test support server can send the result report to the support tool and delete all data received from the result management server. The test support tool provides the received result report for the administrator to view, and the administrator provides the function to check it on the screen and print it out if necessary. The administrator logs out after completing the task in the support tool. Upon logout, the result report may be deleted from the test support tool.

9 is a diagram illustrating a flow chart of a method for confirming a vulnerability test result in consideration of an industrial control system operating environment according to an embodiment of the present invention.

The test support system, which is a vulnerability test result confirmation system in consideration of the industrial control system operating environment, can be implemented and realized as a test support method, which is a vulnerability test result confirmation method in consideration of the industrial control system operating environment. The technical idea of the vulnerability test result confirmation system can be applied as it is.

Such a vulnerability test result confirmation method in consideration of the industrial control system operating environment may be implemented as an application or implemented in the form of a program command that may be executed through various computer components and recorded in a computer-readable recording medium. The computer-readable recording medium may include program instructions, data files, data structures, etc. alone or in combination.

The program instructions recorded on the computer-readable recording medium are specially designed and configured for the present invention, and may be known and available to those skilled in the computer software field.

In the application management method operating in an application management system having a central processing unit and a memory, the test support tool authentication step (S901) is to authenticate the test support tool that receives the test result from the tester in the test support tool authentication unit 110 do.

In the test support tool authentication step S901, authentication information is received from the test support tool, and the test support tool is authenticated.

In the test support tool authentication step S901, when the test support tool is authenticated, a random number value is generated and transmitted to the test support tool.

In the test support tool authentication step S901, a verification value generated based on a random number value is received from the test support tool and the integrity of the test support tool is verified.

In the test result receiving step ( S902 ), when the test support tool is authenticated by the test result receiving unit 120 , the test result is received from the test support tool and stored.

In the test result receiving step S902, a hash value corresponding to the test result is further received from the test support tool.

In the success message transmission step (S903), when the test result is stored in the success message transmitter 130, the test support tool transmits a message guiding the deletion of the test result.

When the test support tool receives a message instructing to delete the test result, it deletes the test result except for the hash value.

In the report generating step ( S904 ), the report generating unit 140 generates a report based on one or more stored test results.

In the report transmission step (S905), the report generated by the report transmission unit 150 and the test result included in the report are encrypted and transmitted to the result management server, and the generated report and the test result included in the report are deleted.

In the test result request receiving step, the test result request receiving unit 160 receives a test result request from the test support tool.

The test result request receiving step receives a hash value corresponding to the test result request from the test support tool.

In the result inquiry step, the result inquiry unit 170 responds to the test result request information, receives the test result corresponding to the test result request from the result management server, and transmits the received test result to the test support tool.

The result inquiry step receives the test result corresponding to the hash value from the result management server, checks whether the hash value matches, and then transmits the test result to the test support tool.

The test support tool is connected through the internal network, and the result management server is connected through the external network.

In the test result input step, the test result input unit 210 receives the test result from the tester.

In the authentication processing step, the authentication processing unit 220 transmits authentication information to the test support server, and receives an authentication confirmation from the test support server.

The authentication processing step receives a random number value generated by the test support server.

In the authentication processing step, the verification value generated based on the random number value is transmitted to the test support server, and the integrity verification result confirmed based on the verification value is received.

In the test result transmission step, when an authentication confirmation is received from the test result transmission unit 230, the test result is transmitted and stored in the test support server.

The test result transmission step generates a hash value for the test result and transmits it together with the test result.

In the test result deletion step, when the test result deletion unit 240 receives a message indicating that the test result is stored from the test support server, the test result is deleted.

In the test result deletion step, when a message indicating that the test result is stored is received, the test result is deleted except for the hash value.

In the test result request transmission step, the test result request transmission unit 250 transmits a test result request to the test support server.

In the test result request transmission step, a hash value corresponding to the test result request is transmitted together with the test result request.

In the test result confirmation step, the test result corresponding to the test result request is received from the test support server in the test result confirmation step.

The test result confirmation step receives the test result verified based on the hash value from the test support server.

Examples of the computer-readable recording medium include hard disks, magnetic media such as floppy disks and magnetic tapes, optical recording media such as CDROMs and DVDs, magneto-optical media such as floppy disks. , and hardware devices specially configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like.

Examples of program instructions include not only machine language codes such as those generated by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like. The hardware device may be configured to operate as one or more software modules to perform processing according to the present invention, and vice versa.

Although the above has been described with reference to the embodiments, those skilled in the art can variously modify and change the present invention within the scope without departing from the spirit and scope of the present invention described in the claims below.

110: test support tool authentication unit 120: test result receiving unit
130: success message transmission unit 140: report generation unit
150: report transmitting unit 160: test result request receiving unit
170: result inquiry unit
210: test result input unit 220: authentication processing unit
230: test result transmission unit 240: test result deletion unit
250: test result request transmission unit 260: test result confirmation unit

Claims (19)

a test support tool authentication unit that certifies the test support tool that receives test results from the tester;
a test result receiver configured to receive and store the test results from the test support tool when the test support tool is authenticated;
a success message transmission unit that, when the test result is stored, transmits a message instructing the test support tool to delete the test result;
a report generator for generating a report based on one or more of the stored test results; and
A report transmission unit that encrypts the generated report and the test result included in the report, transmits it to a result management server, and deletes the generated report and the test result included in the report
Exam support system that includes. According to claim 1,
a test result request receiving unit for receiving a test result request from the test support tool; and
A result inquiry unit for receiving a test result corresponding to the test result request from the result management server in response to the test result request information, and transmitting the received test result to the test support tool
Test support system, characterized in that it further comprises. 3. The method of claim 2,
The test result receiving unit
Further receiving a hash value corresponding to the test result from the test support tool,
The test support tool is
Upon receiving a message guiding to delete the test result, delete the test result except for the hash value,
The test result request receiving unit
receiving a hash value corresponding to the test result request from the test support tool;
The result inquiry unit
Receiving the test result corresponding to the hash value from the result management server, confirming that the hash value matches, and then transmitting the test result to the test support tool
Test support system, characterized in that. According to claim 1,
The test support tool certification department
receiving authentication information from the test support tool to authenticate the test support tool;
Upon authentication, a random number value is generated and transmitted to the test support tool,
Receiving a verification value generated based on the random number value from the test support tool to verify the integrity of the test support tool
Test support system, characterized in that. According to claim 1,
The test support tool is connected through an internal network,
The result management server is connected through an external network
Test support system, characterized in that. a test result input unit for receiving test results from the tester;
an authentication processing unit for transmitting authentication information to the test support server and receiving an authentication confirmation from the test support server;
a test result transmission unit configured to transmit and store the test result to the test support server when the authentication confirmation is received; and
A test result deletion unit that deletes the test result when receiving a message indicating that the test result is stored from the test support server
Exam support system that includes. 7. The method of claim 6,
a test result request transmission unit for transmitting a test result request to the test support server; and
A test result confirmation unit for receiving a test result corresponding to the test result request from the test support server
Test support system, characterized in that it further comprises. 8. The method of claim 7,
The test result transmission unit
A hash value for the test result is generated and transmitted together with the test result,
The test result deletion part
Upon receiving a message indicating that the test result is stored, delete the test result except for the hash value,
The test result request transmission unit
Transmitting a hash value corresponding to the test result request together with the test result request,
The test result confirmation unit
Receiving the test result verified based on the hash value from the test support server
Test support system, characterized in that. 7. The method of claim 6,
The authentication processing unit
Receive the random number value generated by the test support server,
Transmitting a verification value generated based on the random number value to the test support server, and receiving an integrity verification result confirmed based on the verification value
Test support system, characterized in that. A test support method operating in a test support system having a central processing unit and a memory, the test support method comprising:
A test support tool authentication step of authenticating the test support tool that receives the test result from the tester in the test support tool certification unit;
a test result receiving step of receiving and storing the test result from the test support tool when the test support tool is authenticated by the test result receiving unit;
a success message transmission step of transmitting a message instructing the test support tool to delete the test result when the test result is stored in the success message transmitting unit;
a report generating step of generating a report based on the one or more stored test results in the report generating unit; and
A report transmission step of encrypting the generated report and the test result included in the report in the report transmission unit and transmitting it to a result management server, and deleting the generated report and the test result included in the report
How to apply for the exam, including. 11. The method of claim 10,
a test result request step of receiving a test result request from the test support tool in the test result requesting unit; and
A result inquiry step of receiving the test result corresponding to the test result request from the result management server in response to the test result request information in the result inquiry unit, and transmitting the received test result to the test support tool
Test support method, characterized in that it further comprises. 12. The method of claim 11,
Receiving the test result is
Further receiving a hash value corresponding to the test result from the test support tool,
The test support tool is
Upon receiving a message guiding to delete the test result, delete the test result except for the hash value,
The test result request step is
receiving a hash value corresponding to the test result request from the test support tool;
The result inquiry step is
Receiving the test result corresponding to the hash value from the result management server, confirming that the hash value matches, and then transmitting the test result to the test support tool
Test application method characterized by. 11. The method of claim 10,
The test support tool certification step is
receiving authentication information from the test support tool to authenticate the test support tool;
Upon authentication, a random number value is generated and transmitted to the test support tool,
Receiving a verification value generated based on the random number value from the test support tool to verify the integrity of the test support tool
Test application method characterized by. 11. The method of claim 10,
The test support tool is connected through an internal network,
The result management server is connected through an external network
Test application method characterized by. A test support method operating in a test support system having a central processing unit and a memory, the test support method comprising:
a test result input step of receiving the test result from the tester in the test result input unit;
an authentication processing step of transmitting authentication information from the authentication processing unit to the test support server and receiving an authentication confirmation from the test support server;
a test result transmission step of transmitting and storing the test result to the test support server when the authentication confirmation is received by the test result transmission unit; and
When the test result deletion unit receives a message indicating that the test result is stored from the test support server, the test result deletion step
How to apply for the exam, including. 16. The method of claim 15,
a test result request transmission step of transmitting a test result request from the test result request transmission unit to the test support server; and
A test result confirmation step in which the test result confirmation unit receives a test result corresponding to the test result request from the test support server
Test support method, characterized in that it further comprises. 17. The method of claim 16,
The test result transmission step is
A hash value for the test result is generated and transmitted together with the test result,
The step of deleting the test result is
Upon receiving a message indicating that the test result is stored, delete the test result except for the hash value,
The test result request transmission step is
Transmitting a hash value corresponding to the test result request together with the test result request,
The step of confirming the test result is
Receiving the test result verified based on the hash value from the test support server
Test application method characterized by. 16. The method of claim 15,
The authentication process step is
Receive the random number value generated by the test support server,
Transmitting a verification value generated based on the random number value to the test support server, and receiving an integrity verification result confirmed based on the verification value
Test application method characterized by. A recording medium recording a program for executing the method of any one of claims 10 to 18.

Images