基于数据集相关性聚类的渗透测试目标信息获取模型研究

Research of the Model of the Acquisition of the Target Information in the Penetration Test Based on Relativity Clustering Analysis of Dataset

渗透测试中对目标进行侦察的目的是为了获取目标网络的IP地址、运行的操作系统以及应用程序列表。目前侦察主要通过一些单一的工具进行,这种方式侦察周期较长。结合目标信息内容,提出一种通过对数据集进行相关性聚类的方式来获取目标信息的模型,并设计了原型系统。实验结果表明,该模型优于相关工作,在较短的时间周期内获取了准确的目标信息。

The target must be scouted before the penetration test. The objective is to obtain the host IP address, the operation system as well as the list of application of the target. Recently, the methods of scout work used wildly depend on single tool. The period to do is so long. According to the content of the target information, a model of the acquisition of the target information in the penetration test based on relativity clustering analysis of dataset, and design the prototype is presented. The results show that the model is better than others, and get the target information quickly.