Penetration test method based on expert system knowledge base

Abstract

The invention discloses a penetration test method based on an expert system knowledge base, and belongs to the technical field of penetration test. In the existing permeation process, the permeation workload is large, the consumed time is long, and the labor cost is high. The invention provides a penetration knowledge base based on an expert system, which is characterized in that penetration experience of penetration experts is stored in a database in the form of a hacker language, so that behavioral penetration data is converted into a digital vector to be stored in the database of the penetration knowledge base, and then penetration rules which can be identified by a machine are formed; by using permeation knowledge in the permeation knowledge base, the final purpose can be achieved by using the least manpower and material resources in the face of complex and diverse characteristics of target sites and servers or in a certain specific permeation environment, and permeation work is not completed in the mode of exhaustive traversal permeation. Therefore, the workload of vulnerability mining can be effectively reduced, the penetration test accuracy is improved, the labor cost is reduced, and the test time is shortened.

Description

technical field [0001] The invention relates to a penetration testing method based on an expert system knowledge base, and belongs to the technical field of penetration testing. Background technique [0002] With the rise and development of the network, more and more devices can be connected to the Internet, and more and more open information services are provided on the network. To ensure the security of these services, the usual practice is to These services conduct regular security checks, find out the weak points in the network services, and repair them in time. However, as more and more services are opened to the network, and network service technology is becoming more and more perfect, it becomes more and more difficult to discover vulnerabilities. increase, time-consuming and high labor costs. Contents of the invention [0003] Aiming at the defects of the prior art, the purpose of the present invention is to provide a kind of infiltration knowledge base based on ...

AI Technical Summary

Problems solved by technology

[0003] Aiming at the defects of the prior art, the purpose of the present invention is to provide a kind of infiltration knowledge base based on an expert system in order to overcome the problems of large infiltration workload, long time consumption and high labor cost in the infiltration process. By using the infiltration knowledge The penetration knowledge in the library can use the least manpower and material resources to achieve the ultimate goal in the face of complex and diverse target sites, server characteristics or a specific penetration environment, rather than exhaustive traversal penetration methods The penetration testing method based on expert system knowledge base can effectively reduce the workload of vulnerability mining, improve the accuracy of penetration testing, reduce labor costs, and shorten testing time.

Images