arXiv:2502.11588cs.AIcs.NI2025-02被引 6

提出统一框架AutoPT-Sim,让智能攻防测试更高效真实

A Unified Modeling Framework for Automated Penetration Testing

  • 按目标、复杂度等四维度分类现有方法,构建MDCPM体系
  • 支持多尺度网络动态建模,可自动生成定制化测试环境
  • 开源数据集与生成工具,助力攻防策略自动化研究

人工智能在自动化渗透测试(AutoPT)中的应用凸显了仿真建模对智能体训练的重要性,因其成本低且反馈快。尽管AutoPT研究众多,但缺乏统一的仿真建模框架。本文系统综述并整合现有技术,提出MDCPM框架,依据文献目标、网络仿真复杂度、技术和战术操作依赖性、场景反馈与变化进行分类。为弥补多维多层次仿真建模、动态环境建模及公开数据集匮乏的空白,我们提出AutoPT-Sim框架,基于策略自动化,融合所有子维度。该框架全面建模网络环境、攻击者与防御者,突破静态建模限制,适配不同规模网络。我们公开发布标准网络环境数据集及网络生成器代码。通过灵活集成公开数据集,支持多种仿真建模层级,网络生成器允许研究人员通过调整参数或微调生成定制目标网络数据。

原文摘要 · Abstract (English)

The integration of artificial intelligence into automated penetration testing (AutoPT) has highlighted the necessity of simulation modeling for the training of intelligent agents, due to its cost-efficiency and swift feedback capabilities. Despite the proliferation of AutoPT research, there is a recognized gap in the availability of a unified framework for simulation modeling methods. This paper presents a systematic review and synthesis of existing techniques, introducing MDCPM to categorize studies based on literature objectives, network simulation complexity, dependency of technical and tactical operations, and scenario feedback and variation. To bridge the gap in unified method for multi-dimensional and multi-level simulation modeling, dynamic environment modeling, and the scarcity of public datasets, we introduce AutoPT-Sim, a novel modeling framework that based on policy automation and encompasses the combination of all sub dimensions. AutoPT-Sim offers a comprehensive approach to modeling network environments, attackers, and defenders, transcending the constraints of static modeling and accommodating networks of diverse scales. We publicly release a generated standard network environment dataset and the code of Network Generator. By integrating publicly available datasets flexibly, support is offered for various simulation modeling levels focused on policy automation in MDCPM and the network generator help researchers output customized target network data by adjusting parameters or fine-tuning the network generator.

自动化测试攻防模拟仿真建模AI安全

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。