基于最小化攻击图的自动化渗透测试模型

Automated penetration test model base on Minimal Attack Graph

完全攻击图在大规模网络上的应用效率并不理想,主机和漏洞数目的小幅增加导致时间消耗的大幅增加,最小化攻击图可以有效解决该问题.文章优化了最小化攻击图的生成算法并将其应用到渗透测试模型中,通过枚举路径为渗透测试提供测试方案,分析其关键节点提供防御部署的建议.重点解决了生成过程的冗余路径和循环攻击问题,同时利用最小化攻击图生成规模小、效率高的特点使渗透测试系统适用于大规模网络的应用.

Building an automated penetration test model using minimal attack graph, we provide optimal path decision and defensive disposition for the system. Meanwhile we propose the method to control redundant path and cycle attack in the minimal attack graph generating algorithm. We utilize minimal attack graph＇ s character- istic to make this system suitable for large-scale network.