关键词: 网络渗透测试, Backtrack4, 自动化, 数据格式支持, PDFL

Abstract:

Backtrack4 is a highly evaluated penetration test platform. It contains large database of security tool collection up-to-date, but it can not work efficiently without data supporting. We propose a penetration test framework (PTF) with unified data format mechanism, which can accomplish penetration testing automatically and efficiently. Tools are used automatically for information detection, vulnerability assessment, and report createment. Real network experiments show that PTF can highly enhance the effectiveness of penetration test using Backtrack4.

Key words: network penetration testing, Backtrack4, automatic, unified data format supportion, PDFL