.png){kind=icon}
返回
An Intelligent Penetration Testing Method Using Human Feedback
.png){kind=icon}
PRE
AI
DOI：10.1109/TII.2024.3379633.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Penetration testing is widely acknowledged as the foremost method for evaluating network security. However, three challenges impede the generation of strategies that align with human expectations. In this article, we present, for the first time, a method based on human feedback to enhance strategy generation. Our approach comprises two components: agent training and decision-making. During agent training, we establish a hierarchical framework to decompose tasks and a knowledge base to offer advice for improving data efficiency. We then impose constraints on the action space to mitigate ineffective exploration. Finally, we train a reward model based on human feedback and fine tune the model guided by this reward model. In decision-making, we process the model output to enhance decision accuracy. We crafted scenarios based on real-world networks, and the results demonstrate the effectiveness of our method in generating penetration testing strategies that align more closely with human intentions.
Keyword:
Deep reinforcement learning (DRL)
expert knowledge
human feedback
intelligent penetration testing (PT)
network security assessment
期刊
IF:
9.9
论文数:
8.6K
被引数:
6.0W
机构
引用论文
分享收藏Evolution of ultrasonic velocity and dynamic elastic moduli with shear strain in granular layers
PREAI
分享收藏GAIL-PT: An intelligent penetration testing framework with generative adversarial imitation learning.png)
COMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏
查看更多内容