关键词: 渗透测试, 攻击图, 原子攻击, 攻击推理, 网络安全

Abstract: In order to fulfil the need for network security management, a new automatic generation method of penetration test programs was proposed in this paper. The penetration attack graph was set up with the inference relation of the vulnerabilities in the target network through the forward breadth-first search strategy which combined knowledge of atomic attack. The system produced penetration test programs through reverse depth-first traversal attack graph. A prototype of penetration test programs automatic generating system was designed and implemented on the basis of this method. The illustration indicates that this method can effectively set up the penetration test programs which provide a useful reference for network security analysis.

Key words: penetration testing, attack graph, atomic attack, attack reasoning, network security