基于数据格式支持机制的自动化渗透测试框架

Automatic penetration test framework based on unified data format mechanism

Backtrack4是功能最全面的一款测试平台,但由于数据交换处理机制的缺失使得它难以胜任高效的测试需求.设计了相应的数据格式支持机制,并依此开发了一个渗透测试框架(PTF).该框架会自动使用有关的渗透测试工具进行信息探测、漏洞评估、报告生成.真实网络环境中的实验验证了PTF能高效完成自动化渗透测试,进而大幅提升了使用Backtrack4进行渗透测试的有效性.

Backtrack4 is a highly evaluated penetration test platform.It contains large database of security tool collection up-to-date,but it can not work efficiently without data supporting.We propose a penetration test framework（PTF） with unified data format mechanism,which can accomplish penetration testing automatically and efficiently.Tools are used automatically for information detection,vulnerability assessment,and report createment.Real network experiments show that PTF can highly enhance the effectiveness of penetration test using Backtrack4.