arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2103.15072cs.CR
收藏

道德黑客调查:问题与挑战

A Survey on Ethical Hacking: Issues and Challenges

Jean-Paul A. Yaacoub, Hassan N. Noura, Ola Salman, Ali Chehab

摘要:

安全攻击正以指数方式增长,它们对现有系统的影响非常大,可能导致危险的后果。然而,为了减少这些攻击的影响,渗透测试是非常必要的,并且可以被认为是此任务的合适解决方案。因此,本文的主要重点是解释渗透测试的技术和非技术步骤。渗透测试的目的是使现有系统及其相应的数据更加安全,高效和弹性。换句话说,笔测试是一种模拟攻击,目的是识别任何可利用的漏洞或/和安全漏洞。事实上,任何已识别的可利用漏洞都将被用于对系统、设备或人员进行攻击。这一日益严重的问题应该得到解决和缓解,以更好地抵御这些攻击。此外,还列出了渗透试验的优点和局限性。渗透测试的主要问题是有效地检测已知的漏洞。因此,为了抵抗未知的漏洞,除了加强使用影子蜜罐之外,还需要一种新的现代渗透测试。这也可以通过加强入侵检测/防御系统的异常检测来实现。事实上,通过设计不同安全元素和渗透测试之间的有效合作来提高安全性。

英文摘要:

Security attacks are growing in an exponential manner and their impact on existing systems is seriously high and can lead to dangerous consequences. However, in order to reduce the effect of these attacks, penetration tests are highly required, and can be considered as a suitable solution for this task. Therefore, the main focus of this paper is to explain the technical and non-technical steps of penetration tests. The objective of penetration tests is to make existing systems and their corresponding data more secure, efficient and resilient. In other terms, pen testing is a simulated attack with the goal of identifying any exploitable vulnerability or/and a security gap. In fact, any identified exploitable vulnerability will be used to conduct attacks on systems, devices, or personnel. This growing problem should be solved and mitigated to reach better resistance against these attacks. Moreover, the advantages and limitations of penetration tests are also listed. The main issue of penetration tests that it is efficient to detect known vulnerabilities. Therefore, in order to resist unknown vulnerabilities, a new kind of modern penetration tests is required, in addition to reinforcing the use of shadows honeypots. This can also be done by reinforcing the anomaly detection of intrusion detection/prevention system. In fact, security is increased by designing an efficient cooperation between the different security elements and penetration tests.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑