Penetration Testing Framework for TSN Industrial Control Systems

Time-Sensitive Networking (TSN), the next generation of deterministic Ethernet communications, is propelling industrial control systems to new higher levels. However, since TSN industrial control systems face security difficulties such as “low vulnerability mining and low device protection”, penetration testing of TSN industrial control systems is essential. The paper presents a framework for penetration testing TSN industrial control systems. Based on traditional penetration testing, the proposed framework tests the system across its entire life cycle by thoroughly studying the TSN industrial control system and mining possible vulnerabilities. The experimental results demonstrate that the proposed framework can conclude the testing of extranet and intranet attacks, which validates the overall system security and confirms the practicality of the framework.