基于攻击图的渗透测试方案自动生成方法  

Automatic generation method for penetration test programs based on attack graph

作　　者：崔颖[1] 章丽娟[1] 吴灏[1] 

机构地区：[1]信息工程大学信息工程学院,郑州450002

出　　处：《计算机应用》2010年第8期2146-2150,共5页journal of Computer Applications

摘　　要：为满足网络安全管理需要,提出一种新的渗透测试方案自动生成方法。该方法利用被测试目标网络脆弱点间的逻辑关系,结合原子攻击知识库,通过前向广度优先搜索策略产生渗透攻击图,然后深度优先遍历渗透攻击图生成渗透测试方案,并基于该方法设计实现渗透测试预案自动生成原型系统。实例表明该方法能够有效生成可行的渗透测试方案。In order to fulfil the need for network security management a new automatic generation method of penetration test programs was proposed in this paper.The penetration attack graph was set up with the inference relation of the vulnerabilities in the target network through the forward breadth-first search strategy which combined knowledge of atomic attack.The system produced penetration test programs through reverse depth-first traversal attack graph.A prototype of penetration test programs automatic generating system was designed and implemented on the basis of this method.The illustration indicates that this method can effectively set up the penetration test programs which provide a useful reference for network security analysis.

关 键 词：渗透测试 攻击图 原子攻击 攻击推理 网络安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] TP311[自动化与计算机技术—计算机科学与技术]