In the increasingly challenging landscape of cyberspace, penetration testing has garnered significant attention as a means of maintaining cybersecurity. The automation and intelligent enhancement of penetration testing have become key areas of current research. Particularly, the focus of automated penetration testing research lies in penetration path planning and penetration decision generation. This review provides a comprehensive overview of the methodologies related to automated penetration testing, with an emphasis on the development processes and current research status of penetration path planning and penetration decision generation. It also summarizes the current limitations and challenges in this field and offers perspectives on future development.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Review of Path Planning and Decision-Making in Automated Penetration Testing

  • Chencong Zheng,
  • Hui Lu,
  • Jin Peng,
  • Xun Huang,
  • Rui Gao,
  • Jieyao Xue,
  • Xinge Zhang,
  • Youyu Liu,
  • Haonan Zhang,
  • Zhouyang Liu

摘要

In the increasingly challenging landscape of cyberspace, penetration testing has garnered significant attention as a means of maintaining cybersecurity. The automation and intelligent enhancement of penetration testing have become key areas of current research. Particularly, the focus of automated penetration testing research lies in penetration path planning and penetration decision generation. This review provides a comprehensive overview of the methodologies related to automated penetration testing, with an emphasis on the development processes and current research status of penetration path planning and penetration decision generation. It also summarizes the current limitations and challenges in this field and offers perspectives on future development.