Attack model is the foundation for organizing and implementing attacks against the target system in Attack Resistance Test. By redefining the node of the attack tree model and redescribing the relation of the attack tree nodes, we build a penetration attack tree model which can describe, organize, classify, manage and schedule the attacks for Attack Resistance Test. The organization method of the penetration attack tree is designed in this paper, and an algorithm of attack serialization is put forward. We also design and realize a penetration attack system whose attack scheme is the instance of the model. In the end we present an execution example of the penetration attack system. The example shows that the penetration attack model can describe the logical relationship of the attacks detailedly and effectively, and its serialization result can provide the guidance for penetration attack.

No abstract