摘要
攻击路径发现是自动化渗透测试领域的重要研究方向。该文综合论述了领域独立智能规划技术在面向自动化渗透测试的攻击路径发现上的研究进展及应用前景。首先介绍了攻击路径发现的基本概念并按照技术原理将其划分为基于领域相关和领域独立规划技术的攻击路径发现方法。然后介绍了领域独立智能规划算法,包括确定性规划算法、非确定性规划算法和博弈规划的技术原理和发展状况并就各类方法在攻击路径发现中的应用进行了综述。接着分析总结了渗透测试过程的特点,对比了领域独立智能规划算法应用在面向自动化渗透测试的攻击路径发现时的优缺点。最后对攻击路径发现将来的发展方向进行了总结和展望,希望对未来进一步的研究工作有一定的参考价值。
Attack path discovery is an important research direction in automated penetration testing area.This paper introduces the research progress of domain independent intelligent planning technology and its application to the field of automated penetration testing oriented attack paths discovery.Firstly,the basic concept of attack path discovery is introduced and the related algorithms are divided into domain-specific and domain-independent intelligent planning based attack path discovery algorithms separately.Secondly,the domain-independent planning algorithms are classified into deterministic planning,uncertain planning and game planning,where each of which is described from principle,development and application aspect in detail.Thirdly,this paper summarizes the characteristics of automated penetration testing and compares the advantages and disadvantages of domain independent intelligent planning algorithms adopted in automated penetration testing.Lastly,the development of automated penetration testing oriented attack path discovery is prospected.It is hoped that this paper could contribute future research works on attack path discovery.
作者
臧艺超
周天阳
朱俊虎
王清贤
ZHANG Yichao;ZHOU Tianyang;ZHU Junhu;WANG Qingxian(State Key Laboratory of Mathematical Engineering and Advanced Computing,Information&Engineering University,Zhengzhou 450001,China;National Engineering Technology Research Center of the National Digital Switching System,Zhengzhou 450001,China)
出处
《电子与信息学报》
EI
CSCD
北大核心
2020年第9期2095-2107,共13页
Journal of Electronics & Information Technology
基金
国家自然科学基金(61502528)。
关键词
领域独立智能规划技术
自动化渗透测试
攻击路径发现
Domain independent intelligent planning technology
Automated penetration testing
Attack path discovery