The invention discloses an automatic red team penetration testing method,
system and equipment based on partial order planning, and the method comprises the steps: firstly extracting state information of a target
system, constructing an
action rule, extracting an action, and then defining a target space, a
state space and an action space of an
attack graph; reasoning an
attack purpose in a target space through a recursive mode by applying a partial order planning reasoning engine, adding actions capable of realizing the
attack purpose and updating sequence constraints between the actions, and constructing a complete attack plan and an
attack graph capable of realizing the attack purpose; and constructing an atomic attack behavior evaluation model in combination with DREAD and CVSS to carry out
threat evaluation on each attack path in the
attack graph, carrying out screening by adopting an attack path
screening algorithm to obtain an optimal attack path, and carrying out automatic penetration testing to verify the
network security of the target
system. The automatic red team
penetration test process is realized, the attack steps can be automatically executed to efficiently verify the security state of the target network, and the
penetration test efficiency and accuracy are remarkably improved.