Abstract:As a modern power transmission network, smart grid connects abundant terminal devices and plays an important role in our daily life. However, along with its growth are the security threats. Different from the separated environment previously, an adversary nowadays can destroy the power system by attacking its terminal devices. As a result, it's critical to ensure the security and safety of terminal devices. To achieve it, detecting the pre-existing vulnerabilities in the terminal program and enhancing its security, are of great importance and necessity. In this paper. we introduce Cker, a novel vulnerability detection tool for smart grid devices, which generates an program model based on device sources and sets rules to perform model checking. We utilize the static analysis to extract necessary information and build corresponding program models. By further checking the model with pre-defined vulnerability patterns, we achieve security detection and error reporting. The evaluation results demonstrate that our method can effectively detect vulnerabilities in smart devices with an acceptable accuracy and false positive rate. In addition, as Cker is realized by pure python. it can be easily scaled to other platforms.

Design and implementation of a web application vulnerability detection system

Web Vulnerability Scanning Software

Research and Implementation of Security Vulnerability Detection in Application System of WEB Static Source Code Analysis Based on JAVA

Test Method on Code Injection Vulnerabilities of Web Application

Design and Implementation of Network Vulnerability Scanning System Based on Web

Design and Applying of Web Application Security Detecting System

Design and Implementation of SQL Injection Vulnerability Scanning Tool

Vulnerability Detection For Smart Grid Devices Via Static Analysis

Design of Web Vulnerability Scanner Based on Go Language

Design and Implementation of Web-based Network Vulnerabilities Scan System

D-WAV: A Web Application Vulnerabilities Detection Tool Using Characteristics of Web Forms

Design and Implementation of Website Information Disclosure Assessment System

A Survey on XSS Attack Detection and Prevention in Web Applications

Design and Implementation of Vulnerability Scanning Tools for Intelligent Substation Industrial Control System Based on Openvas

Access Control Vulnerabilities Detection for Web Application Components

Vulnerabilities Mapping based on OWASP-SANS: a Survey for Static Application Security Testing (SAST)

Design and Implementation of Intrusion Detection System Based on Web

A Method for Detecting Code Security Vulnerability Based on Variables Tracking with Validated-Tree

A Hybrid Dynamic Testing technology source code XSS vulnerability detection method

Vulnerability Detection System Based on Taint Range Propagation Analysis

Exploring Defense of SQL Injection Attack in Penetration Testing