Speaker
Description
To address the issues of traditional penetration testing being highly labour-intensive, fragmented tooling, and cumbersome processes, this paper aims to design an automated penetration testing system to reduce the manpower and time expenditure during testing.This paper proposes an overall design framework for an automated penetration testing system. The system comprises two components: an automated penetration testing framework and a penetration testing engine. The framework integrates and manages multiple penetration testing tools, while the engine's core module dynamically generates attack paths based on network states. This drives and controls the automated testing workflow, ultimately generating automated test reports.The primary innovation of this design lies in the systematic integration of disparate testing tools with the attack path generation engine. This achieves centralised management and automated execution of the testing process, providing a clear blueprint for the subsequent development of a fully functional automated penetration testing system.