基于攻击者杀链的研究与实践

AbstractIn the world of the Internet,will be Trojan,ransomware network attacks,to our security threat is huge.Therefore,in order to reduce network threats,penetration testing can effectively assess the security of network systems.Inthis paper,a vulnerability environment based on Web application is set up,and three kinds of Web vulnerabilities are utilized and analyzed through theattacker's chain killing method,which are SQL injection,XSS cross-sitescript,and file upload attack.It is the best choice to evaluate the vulnerabilityrisk of the target system and provide the repair measures through thepenetration test to ensure the stable operation of the target system.Theattacker "kill chain"scheme is a new penetration testing process.Key words:Penetration test,attacker kill chain,vulnerability