Fast Model-Based Penetration Testing

Singh, Sankalp; Lyons, James; Nicol, David M.

doi:10.1109/wsc.2004.1371331

Cited by 13 publications

(7 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This will open a backdoor. Whenever we wish to access that system no entrance fee is required [6]. When it buzz for password, press Shift Key 5 times, you will get an instance of explorer.exe and machine is being compromised.…”

Section: Methodsmentioning

confidence: 99%

Compromising windows 8 with metasploit’s exploit

Pangaria¹,

Shrivastava²,

Soni³

2012

IOSRJCE

View full text Add to dashboard Cite

Section: Methodsmentioning

confidence: 99%

Compromising windows 8 with metasploit’s exploit

Pangaria¹,

Shrivastava²,

Soni³

2012

IOSRJCE

View full text Add to dashboard Cite

“…This will create a backdoor. Whenever we access that system no authentication process required [6]. Press Shift Key 5 times when it asks for password, you will get an instance of explorer.exe and machine is being compromised.…”

Section: Meterpretermentioning

confidence: 99%

Penetrating Windows 8 with syringe utility

Mb¹

2013

IOSR-JCE

View full text Add to dashboard Cite

Windows 8, the most popular operating system by Microsoft launched in October 2012. It is developed for use of desktops, laptops, tablets, home theatre PC's. Windows 8 is more secure than previous versions. It has its built in Anti-malware protection system so no need to worry if an Anti-virus is not installed. Pentesting-It is a process to imitate all ways used by hackers to compromise a system. But with the diference its is purely ethical in deed so as to know in prior how a machine can suffer security breach attack. The main objective of this paper is to compromise a system with windows 8 OS. Generally penetration testing using metasploit framework proceed with the combo of a exploit and payload which in turn gives us a reverse connection to target system. But it is not that easy to do with windows 8 as it immediately detect and eve delete the payload file as soon it is loaded on to the windows 8 system. So we make use of syringe utility with special permissions of windows system

show abstract

“…Singh et al [12] have divided the security quantification methods into penetration testing and analysis of formal models of the system. They have proposed a new approach to quantify security by performing repeated penetration testing of a detailed system model.…”

Section: Related Workmentioning

confidence: 99%

Compositional Approach to Quantify the Vulnerability of Computer Systems

Homaei

Shahriari

2011

The Computer Journal

View full text Add to dashboard Cite

Although analyzing complex systems could be a complicated process, current approaches to quantify system security or vulnerability usually consider the whole system as a single component. In this paper, we propose a new compositional method to evaluate the vulnerability measure of complex systems. By the word composition we mean that the vulnerability measure of a complex system can be computed using pre-calculated vulnerability measures of its components. We define compatible systems to demonstrate which components could combine. Moreover, choice, sequential, parallel and synchronized parallel composition methods are defined and the measurement of the vulnerability in each case is presented. Our method uses a state machine to model the system. The model considers unauthorized states and attacker capabilities. Furthermore, both the probability of attack and delay time to reach the target state are used to quantify vulnerability. The proposed approach would be useful to analyze complex systems which may have complicated models. This approach reduces the state space and complexity of computation. On the other hand, if a component is replaced by another one, the vulnerability measures of other components do not change. Thus, these quantities are reused in new computation. Therefore, the calculation of the vulnerability measure for a new system is simplified.

show abstract

Fast Model-Based Penetration Testing

Cited by 13 publications

References 4 publications

Compromising windows 8 with metasploit’s exploit

Compromising windows 8 with metasploit’s exploit

Penetrating Windows 8 with syringe utility

Compositional Approach to Quantify the Vulnerability of Computer Systems

Contact Info

Product

Resources

About