Welcome to Journal of University of Chinese Academy of Sciences,Today is

›› 2011, Vol. 28 ›› Issue (5): 676-683.DOI: 10.7523/j.issn.2095-6134.2011.5.016

• Research Articles • Previous Articles     Next Articles

Automatic penetration test framework based on unified data format mechanism

WEN Guan-Xing1, ZHANG Yuan-Chao1,2, ZHANG Yu-Qing1   

  1. 1. National Computer Network Intrusion Protection Center, Graduate University, Chinese Academy of Sciences, Beijing 100049, China;
    2. Xi Dian University, Xi’an 710065, China
  • Received:2010-09-01 Revised:2010-11-08 Online:2011-09-15

Abstract:

Backtrack4 is a highly evaluated penetration test platform. It contains large database of security tool collection up-to-date, but it can not work efficiently without data supporting. We propose a penetration test framework (PTF) with unified data format mechanism, which can accomplish penetration testing automatically and efficiently. Tools are used automatically for information detection, vulnerability assessment, and report createment. Real network experiments show that PTF can highly enhance the effectiveness of penetration test using Backtrack4.

Key words: network penetration testing, Backtrack4, automatic, unified data format supportion, PDFL

CLC Number: