Automatic generation method for penetration test programs based on attack graph
Wu Hao · Journal of Computer Applications · 2010
In order to fulfil the need for network security management a new automatic generation method of penetration test programs was proposed in this paper.The penetration attack graph was set up with the inference relation of the vulnerabilities in the target network through the forward breadth-first search strategy which combined knowledge of atomic attack.The system produced penetration test programs through reverse depth-first traversal attack graph.A prototype of penetration test programs automatic generating system was designed and implemented on the basis of this method.The illustration indicates that this method can effectively set up the penetration test programs which provide a useful reference for network security analysis.