构建首个跨编译器的PLC二进制数据集,助力工业控制系统安全分析。
Bridging the PLC Binary Analysis Gap: A Cross-Compiler Dataset and Neural Framework for Industrial Control Systems
- 基于700多个程序构建跨编译器二进制数据集,配源码与功能标签
- 模型识别编译器准确率达93%,细粒度功能分类达42%
- 开源数据集与框架,适合工业安全与逆向工程研究者
工业控制系统依赖可编程逻辑控制器(PLC)管理关键基础设施,但其二进制分析因厂商私有编译器和缺乏源码而困难。为此,我们提出PLC-BEAD数据集,包含来自4种主流编译器(CoDeSys、GEB、OpenPLC-V2、OpenPLC-V3)的2431个已编译二进制文件,覆盖700多个程序。该数据集为每个二进制文件配套原始结构化文本源码及标准化功能标签,支持二进制与源码双层面分析。基于此,我们构建PLCEmbed框架,一种基于Transformer的二进制分析方法,在编译器溯源任务中达到93%准确率,在22类工业控制功能分类中达42%准确率。通过全面消融实验,分析了编译优化级别、代码模式与类别分布对模型性能的影响。我们提供数据集构建流程、标签体系与基准测试协议的详细文档,确保可复现性。PLC-BEAD与PLCEmbed均已开源,旨在推动PLC安全、逆向工程与工业系统取证研究,建立数据驱动工业网络安全的新基准。
原文摘要 · Abstract (English)
Industrial Control Systems (ICS) rely heavily on Programmable Logic Controllers (PLCs) to manage critical infrastructure, yet analyzing PLC executables remains challenging due to diverse proprietary compilers and limited access to source code. To bridge this gap, we introduce PLC-BEAD, a comprehensive dataset containing 2431 compiled binaries from 700+ PLC programs across four major industrial compilers (CoDeSys, GEB, OpenPLC-V2, OpenPLC-V3). This novel dataset uniquely pairs each binary with its original Structured Text source code and standardized functionality labels, enabling both binary-level and source-level analysis. We demonstrate the dataset's utility through PLCEmbed, a transformer-based framework for binary code analysis that achieves 93\% accuracy in compiler provenance identification and 42\% accuracy in fine-grained functionality classification across 22 industrial control categories. Through comprehensive ablation studies, we analyze how compiler optimization levels, code patterns, and class distributions influence model performance. We provide detailed documentation of the dataset creation process, labeling taxonomy, and benchmark protocols to ensure reproducibility. Both PLC-BEAD and PLCEmbed are released as open-source resources to foster research in PLC security, reverse engineering, and ICS forensics, establishing new baselines for data-driven approaches to industrial cybersecurity.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。