SERIAL PORT-BASED CYBER SECURITY VULNERABILITY CHECKING APPARATUS AND METHOD THEREFOR

摘要

According to one embodiment of the present invention, a serial port-based cyber security vulnerability checking apparatus comprises: a vulnerability database for storing vulnerability check items; a communication unit for configuring a serial communication environment with a check target device and configuring a network environment for updating the vulnerability database and managing a system; a vulnerability scanning unit for selecting a vulnerability check item for performing a cyber security vulnerability check for the check target device among the vulnerability check items stored in the vulnerability database and performing scanning for identifying the selected vulnerability check item for the check target device connected to the serial port; a response analyzing unit for analyzing a response of the check target device according to the scanning and determining at least one of an operating system, an application program and a protocol corresponding to the check target device; and a vulnerability presence determination unit for determining whether the vulnerability exists in the check target device by using at least one of the determined operating system, application program and protocol.;COPYRIGHT KIPO 2019