调查攻击性信息安全工具的生态系统
Investigating the Ecosystem of Offensive Information Security Tools
摘要：
互联网格局正在增长，同时变得更加多样化。服务通过计算机和网络执行，关键数据以数字方式存储。这为用户带来了自由，为运营商带来了灵活性。数据更易于管理和分发。然而，连接到网络的每个设备都可能容易受到网络攻击。安全解决方案，如防病毒软件或防火墙，已广泛建立。然而，某些类型的攻击不能仅靠防御措施来防止。攻击性安全描述了安全专业人员使用网络犯罪分子的方法和工具的做法。这使他们能够在漏洞成为真正攻击的切入点之前找到漏洞。此外，遵循网络犯罪分子的方法使安全专业人员能够适应犯罪分子的观点，并可能发现以前被忽视的攻击角度。由于网络犯罪分子经常使用免费提供的安全工具，因此了解这些工具可以为专业人员提供更多的见解。这项工作的分类和比较工具有关的可维护性，可用性和技术细节的指标。一般来说，在最初阶段有几个行之有效的工具，而在最初违反之后的阶段则缺乏各种工具。
英文摘要：
The internet landscape is growing and at the same time becoming more heterogeneous. Services are performed via computers and networks, critical data is stored digitally. This enables freedom for the user, and flexibility for operators. Data is easier to manage and distribute. However, every device connected to a network is potentially susceptible to cyber attacks. Security solutions, such as antivirus software or firewalls, are widely established. However, certain types of attacks cannot be prevented with defensive measures alone. Offensive security describes the practice of security professionals using methods and tools of cyber criminals. This allows them to find vulnerabilities before they become the point of entry in a real attack. Furthermore, following the methods of cyber criminals enables security professionals to adapt to a criminal's point of view and potentially discover attack angles formerly ignored. As cyber criminals often employ freely available security tools, having knowledge about these provides additional insight for professionals. This work categorises and compares tools regarding metrics concerning maintainability, usability and technical details. Generally, several well-established tools are available for the first phases, while phases after the initial breach lack a variety of tools.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
