Original title: Automatizovaný tester bezpečnosti chytrých zařízení v energetice
Translated title: Automated cyber security tester for smart devices in industry
Authors: Dávidík, Roland ; Mlýnek, Petr (referee) ; Lieskovan, Tomáš (advisor)
Document type: Master’s theses
Year: 2020
Language: slo
Publisher: Vysoké učení technické v Brně. Fakulta elektrotechniky a komunikačních technologií
Abstract: [slo] [eng]
Táto diplomová práca vysvetluje princíp SCADA systémov a popisuje DLMS/COSEM protokol. Ďalej stručne popisuje Modbus protokol a popisuje výhody a nevýhody protokolu Modbus oproti DLMS/COSEM protokolu. Po popise protokolu je v diplomovej práci vytvoréný open-source automatizovaný skener, ktorý detekuje zariadenia v laboratórnej sieti. Potom automatozovaný skener zistí otvorené porty a aktívne služby, ktoré bežia na týchto zariadeniach, a pokúsi sa zaútočiť na služby HTTP, SSH a Telnet. Potom program overí, či je zariadenie smart-meter kompatibilný s DLMS/COSEM protokolom. Ak áno, tak overí, či je zariadenie zraniteľné na útok DOS a na rozpojenie breakeru. Výsledky zistenia programu sú prezentované na vlastnej vytvorenej webovej aplikácii. V automatizovanom skenery sú použité open-source programy NMAP, Masscan a Metasploit. Celý automatizovaný skener je optimalizovaný pre hardwarove zariadenie Raspberry Pi s operačným systémom Raspbian Buster Lite. Ďalej je v diplomovej práci otestovaný tento skener na laboratórnom prostredí a je vyhodnotená správnosť jeho výsledkov. This diploma thesis explains the principle of SCADA systems and describes the DLMS/COSEM protocol. In the next part, it shortly describes the Modbus protocol and details the pros and cons of the Modbus protocol in comparison with the DLMS/COSEM protocol. In the next part, an open-source automated scanner was created. This scanner detects devices in a laboratory network. As the next step, the automated scanner finds out open ports and active services, which run on these devices, and tries to attack HTTP, SSH, and Telnet services. Next, the program checks, whether the found device is a smart-meter device and if it is compatible with DLMS/COSEM protocol. If yes, it checks, if the service is vulnerable to DOS attack and breaker disconnection. Scanner’s findings are presented in a newly created web application. NMAP, Masscan, and Metasploit open-source programs are used in the automated scanner. The whole automated scanner is optimized for the HW device Raspberry Pi with the operating system Raspbian Buster Lite installed. This work also describes the testing of the scanner on the laboratory environment and the results are evaluated afterwards.
Keywords: automatic vulnerability’s scanner; disconnect breaker.; DLMS/COSEM protocol; DOS attack; Modbus protocol; SCADA systems

Institution: Brno University of Technology (web)
Document availability information: Fulltext is available in the Brno University of Technology Digital Library.
Original record: http://hdl.handle.net/11012/189115

Permalink: http://www.nusl.cz/ntk/nusl-412983


The record appears in these collections:
Universities and colleges > Public universities > Brno University of Technology
Academic theses (ETDs) > Master’s theses