第42卷第9期电 子 与 信 息 学 报Vol. 42No. 9 2020年9月Journal of Electronics & Information Technology Sept. 2020
领域独立智能规划技术及其面向自动化渗透测试的攻击路径发现研究进展
臧艺超① 周天阳*① 朱俊虎①② 王清贤①
①(数学工程与先进计算国家重点实验室(信息工程大学) 郑州 450001)
②(国家数字交换系统工程技术研究中心 郑州 450001)
摘 要：攻击路径发现是自动化渗透测试领域的重要研究方向。该文综合论述了领域独立智能规划技术在面向自动化渗透测试的攻击路径发现上的研究进展及应用前景。首先介绍了攻击路径发现的基本概念并按照技术原理将其划分为基于领域相关和领域独立规划技术的攻击路径发现方法。然后介绍了领域独立智能规划算法，包括确定性规划算法、非确定性规划算法和博弈规划的技术原理和发展状况并就各类方法在攻击路径发现中的应用进行了综述。接着分析总结了渗透测试过程的特点，对比了领域独立智能规划算法应用在面向自动化渗透测试的攻击路径发现时的优缺点。最后对攻击路径发现将来的发展方向进行了总结和展望，希望对未来进一步的研究工作有一定的参考价值。
关键词：领域独立智能规划技术；自动化渗透测试；攻击路径发现
中图分类号：TN915.08; TP309文献标识码：A文章编号：1009-5896(2020)09-2095-13 DOI: 10.11999/JEIT191056
Domain-Independent Intelligent Planning Technology and Its Application to Automated Penetration Testing Oriented
Attack Path Discovery
ZHANG Yichao① ZHOU Tianyang① ZHU Junhu①② WANG Qingxian①
①(State Key Laboratory of Mathematical Engineering and Advanced Computing, Information & Engineering
University, Zhengzhou 450001, China)
②(National Engineering Technology Rearch Center of the National Digital Switching System,
Zhengzhou 450001, China)
Abstract: Attack path discovery is an important rearch direction in automated penetration testing ar
ea. This paper introduces the rearch progress of domain independent intelligent planning technology and its application to the field of automated penetration testing oriented attack paths discovery. Firstly, the basic concept of attack path discovery is introduced and the related algorithms are divided into domain-specific and domain-independent intelligent planning bad attack path discovery algorithms parately. Secondly, the domain-independent planning algorithms are classified into deterministic planning, uncertain planning and game planning, where each of which is described from principle, development and application aspect in detail.
Thirdly, this paper summarizes the characteristics of automated penetration testing and compares the advantages and disadvantages of domain independent intelligent planning algorithms adopted in automated penetration testing. Lastly, the development of automated penetration testing oriented attack path discovery is prospected. It is hoped that this paper could contribute future rearch works on attack path discovery.
Key words: Domain independent intelligent planning technology; Automated penetration testing; Attack path discovery
收稿日期：2019-12-31；改回日期：2020-03-17；网络出版：2020-07-21
*通信作者： 周天阳 ************************
基金项目：国家自然科学基金(61502528)
Foundation Item: The National Natural Science Foundation of China (61502528)
