Abstract:As a modern power transmission network, smart grid connects abundant terminal devices and plays an important role in our daily life. However, along with its growth are the security threats. Different from the separated environment previously, an adversary nowadays can destroy the power system by attacking its terminal devices. As a result, it's critical to ensure the security and safety of terminal devices. To achieve it, detecting the pre-existing vulnerabilities in the terminal program and enhancing its security, are of great importance and necessity. In this paper. we introduce Cker, a novel vulnerability detection tool for smart grid devices, which generates an program model based on device sources and sets rules to perform model checking. We utilize the static analysis to extract necessary information and build corresponding program models. By further checking the model with pre-defined vulnerability patterns, we achieve security detection and error reporting. The evaluation results demonstrate that our method can effectively detect vulnerabilities in smart devices with an acceptable accuracy and false positive rate. In addition, as Cker is realized by pure python. it can be easily scaled to other platforms.

Vulnerability Analysis Framework for Binaries Based on Model Checking

Application of model checking technology to automatically vulnerabilities finding in software

Vulnerability Detection For Smart Grid Devices Via Static Analysis

Bounded Model Checking Security Properties of Executables

A Program Vulnerabilities Detection Frame by Static Code Analysis and Model Checking

A Vulnerability Exploits Detection Method Based on Binary Program Behavior Analysis

Automated Detection of Code Vulnerabilities Based on Program Analysis and Model Checking

Analysis of Software Structure Vulnerabilities

Vulnerability-based Model Checking of Security Vulnerabilities Mining Method

Analysis Model of Binary Code Security Flaws Based on Structure Characteristics

Towards Security Vulnerability Detection by Source Code Model Checking

The New Progress in the Research of Binary Vulnerability Analysis

Survey of Static Analysis Methods for Binary Code Vulnerability

Method of model checking x86 executables for temporal security vulnerabilities

AADL Vulnerability Modeling and Security Analysis Method

Towards a Flaw Function Heuristic Vulnerability Static Analysis Framework for Executable File

Vulnerability Analysis through Interface-based Checker Design

Ontology Model-Based Static Analysis Of Security Vulnerabilities

Arbiter: Bridging the Static and Dynamic Divide in Vulnerability Discovery on Binary Programs

Executable Based Vulnerability Detection

A new method for analyzing and improving security protocols