摘要
针对网络空间渗透测试缺乏一套完整的动态导航基础理论体系,提出了网络空间动态导航的技术体系架构。利用网络空间中的动态导航和精确制导技术,靶向性突破中间节点并渗透到靶节点。渗透过程先对网络漏洞进行识别与利用,依靠攻击知识图谱,寻找并利用与实际场景匹配的攻击手段。提出的网络空间动态导航技术能够实现网络空间路径的科学规划,从而动态形成攻击路径链,主动并持续地进行模拟入侵并渗透到靶节点,最终达到远程渗透的目的。
In view of lacking a set of basic theory system of dynamic navigation in penetration testing of cyberspace,the technical architecture of dynamic navigation in cyberspace is put forward.The technology of dynamic navigation and precision guided in cyberspace breaks through the intermediate nodes targetedly and penetrates to the target node.Network vulnerability is identified and utilized in the penetration process,then attack means matching actual scene is found and utilized.Using the dynamic navigation technology in cyberspace proposed in this paper,the scientific path planning is realized,thus attack path chain is formulated dynamically,simulated invasion is carried out actively and continuously to penetrate to the target node,and finally the goal of remote penetration is achieved.
作者
谭玲玲
杨飞
张洋
易军凯
TAN Lingling;YANG Fei;ZHANG Yang;YI Junkai(School of Automation,Beijing Information Science&Technology University,Beijing 100192,China)
出处
《北京信息科技大学学报（自然科学版）》
2020年第6期50-55,60,共7页
Journal of Beijing Information Science and Technology University
基金
国家自然科学基金联合基金重点基金资助项目(U1636208)
北京信息科技大学校基金项目(2025007,2025008)。
关键词
网络安全
动态导航
渗透测试
攻击路径
路径规划
network security
dynamic navigation
penetration testing
attack path
route planning
