title: ÐÐ²ÑÐ¾Ð¼Ð°ÑÐ¸Ð·Ð°ÑÐ¸Ñ ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð½Ð° Ð¿ÑÐ¾Ð½Ð¸ÐºÐ½Ð¾Ð²ÐµÐ½Ð¸Ðµ Ð´ÐµÑÐµÐ½ÑÑÐ°Ð»Ð¸Ð·Ð¾Ð²Ð°Ð½Ð½ÑÑ ÐºÐ¸Ð±ÐµÑÑÐ¸Ð·Ð¸ÑÐµÑÐºÐ¸Ñ ÑÐ¸ÑÑÐµÐ¼
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° ÑÐ¿ÐµÑÐ¸Ð°Ð»Ð¸ÑÑÐ°
titleType: Subtitle
title: Automation of penetration testing for decentralized cyber-physical systems
Creators: name: Ð¨Ð¸ÑÑÑÐ¸Ð½, Ð­Ð´ÑÐ°ÑÐ´
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2024
Subjects: Ð°Ð²ÑÐ¾Ð¼Ð°ÑÐ¸Ð·Ð°ÑÐ¸Ñ ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð½Ð° Ð¿ÑÐ¾Ð½Ð¸ÐºÐ½Ð¾Ð²ÐµÐ½Ð¸Ðµ
Ð´ÐµÑÐµÐ½ÑÑÐ°Ð»Ð¸Ð·Ð¾Ð²Ð°Ð½Ð½ÑÐµ ÐºÐ¸Ð±ÐµÑÑÐ¸Ð·Ð¸ÑÐµÑÐºÐ¸Ðµ ÑÐ¸ÑÑÐµÐ¼Ñ
Ð¼Ð¾Ð´ÐµÐ»Ñ ÑÐ³ÑÐ¾Ð·
penetration testing automation
decentralized cyber-physical systems
threat model

description: Ð¦ÐµÐ»ÑÑ ÑÐ°Ð±Ð¾ÑÑ ÑÐ²Ð»ÑÐµÑÑÑ Ð¿ÑÐ¸Ð¼ÐµÐ½ÐµÐ½Ð¸Ðµ Ð¼Ð°ÑÐ¸Ð½Ð½Ð¾Ð³Ð¾ Ð¾Ð±ÑÑÐµÐ½Ð¸Ñ Ð´Ð»Ñ Ð°Ð²ÑÐ¾Ð¼Ð°ÑÐ¸Ð·Ð°ÑÐ¸Ð¸ ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð½Ð° Ð¿ÑÐ¾Ð½Ð¸ÐºÐ½Ð¾Ð²ÐµÐ½Ð¸Ðµ Ð´ÐµÑÐµÐ½ÑÑÐ°Ð»Ð¸Ð·Ð¾Ð²Ð°Ð½Ð½ÑÑ ÐÐ¤Ð¡. ÐÑÐµÐ´Ð¼ÐµÑÐ¾Ð¼ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ ÑÐ²Ð»ÑÑÑÑÑ Ð¼ÐµÑÐ¾Ð´Ñ Ð°Ð²ÑÐ¾Ð¼Ð°ÑÐ¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ð½Ð¾Ð³Ð¾ ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð½Ð° Ð¿ÑÐ¾Ð½Ð¸ÐºÐ½Ð¾Ð²ÐµÐ½Ð¸Ðµ Ð´ÐµÑÐµÐ½ÑÑÐ°Ð»Ð¸Ð·Ð¾Ð²Ð°Ð½Ð½ÑÑ ÐÐ¤Ð¡. ÐÐ°Ð´Ð°ÑÐ¸, ÑÐµÑÐ°ÐµÐ¼ÑÐµ Ð² ÑÐ¾Ð´Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ: 1. ÐÐ¾ÑÑÑÐ¾ÐµÐ½Ð¸Ðµ Ð¼Ð¾Ð´ÐµÐ»Ð¸ ÑÐ³ÑÐ¾Ð· Ð´ÐµÑÐµÐ½ÑÑÐ°Ð»Ð¸Ð·Ð¾Ð²Ð°Ð½Ð½ÑÑ ÐÐ¤Ð¡. 2. ÐÐ½Ð°Ð»Ð¸Ð· ÑÐ¿Ð¾ÑÐ¾Ð±Ð¾Ð² Ð°Ð²ÑÐ¾Ð¼Ð°ÑÐ¸Ð·Ð°ÑÐ¸Ð¸ ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð½Ð° Ð¿ÑÐ¾Ð½Ð¸ÐºÐ½Ð¾Ð²ÐµÐ½Ð¸Ðµ Ð¸ Ð¸Ñ Ð¿ÑÐ¸Ð¼ÐµÐ½Ð¸Ð¼Ð¾ÑÑÑ Ðº Ð´ÐµÑÐµÐ½ÑÑÐ°Ð»Ð¸Ð·Ð¾Ð²Ð°Ð½Ð½ÑÐ¼ ÐºÐ¸Ð±ÐµÑÑÐ¸Ð·Ð¸ÑÐµÑÐºÐ¸Ð¼ ÑÐ¸ÑÑÐµÐ¼Ð°Ð¼. 3. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° ÑÐ¿Ð¾ÑÐ¾Ð±Ð° Ð°Ð²ÑÐ¾Ð¼Ð°ÑÐ¸Ð·Ð°ÑÐ¸Ð¸ ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð½Ð° Ð¿ÑÐ¾Ð½Ð¸ÐºÐ½Ð¾Ð²ÐµÐ½Ð¸Ðµ Ð´ÐµÑÐµÐ½ÑÑÐ°Ð»Ð¸Ð·Ð¾Ð²Ð°Ð½Ð½ÑÑ ÐºÐ¸Ð±ÐµÑÑÐ¸Ð·Ð¸ÑÐµÑÐºÐ¸Ñ ÑÐ¸ÑÑÐµÐ¼ Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ Ð¼Ð°ÑÐ¸Ð½Ð½Ð¾Ð³Ð¾ Ð¾Ð±ÑÑÐµÐ½Ð¸Ñ. 4. Ð­ÐºÑÐ¿ÐµÑÐ¸Ð¼ÐµÐ½ÑÐ°Ð»ÑÐ½Ð°Ñ Ð¾ÑÐµÐ½ÐºÐ° ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð½Ð¾Ð³Ð¾ ÑÐ¿Ð¾ÑÐ¾Ð±Ð° Ð½Ð° Ð¿ÑÐ¸Ð¼ÐµÑÐµ Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ñ ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐµÐ¹ ÑÐ°Ð´Ð¸Ð¾ÐºÐ°Ð½Ð°Ð»Ð°. Ð ÑÐ¾Ð´Ðµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ»Ð° ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð° ÑÐµÐ·ÑÐ»ÑÑÐ¸ÑÑÑÑÐ°Ñ ÑÐ°Ð±Ð»Ð¸ÑÐ° Ð¼Ð¾Ð´ÐµÐ»Ð¸ ÑÐ³ÑÐ¾Ð· Ð´ÐµÑÐµÐ½ÑÑÐ°Ð»Ð¸Ð·Ð¾Ð²Ð°Ð½Ð½ÑÑ ÐºÐ¸Ð±ÐµÑÑÐ¸Ð·Ð¸ÑÐµÑÐºÐ¸Ñ ÑÐ¸ÑÑÐµÐ¼. ÐÑÐ»Ð¸ Ð¿ÑÐ¾Ð°Ð½Ð°Ð»Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ñ Ð¾ÑÐ¾Ð±ÐµÐ½Ð½Ð¾ÑÑÐ¸ Ð¿ÑÐ¾Ð²ÐµÐ´ÐµÐ½Ð¸Ñ ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð½Ð° Ð¿ÑÐ¾Ð½Ð¸ÐºÐ½Ð¾Ð²ÐµÐ½Ð¸Ðµ Ð´ÐµÑÐµÐ½ÑÑÐ°Ð»Ð¸Ð·Ð¾Ð²Ð°Ð½Ð½ÑÑ ÐºÐ¸Ð±ÐµÑÑÐ¸Ð·Ð¸ÑÐµÑÐºÐ¸Ñ ÑÐ¸ÑÑÐµÐ¼ Ð¸ ÑÐ¾Ð²ÑÐµÐ¼ÐµÐ½Ð½ÑÐµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ Ð² Ð¾Ð±Ð»Ð°ÑÑÐ¸ Ð°Ð²ÑÐ¾Ð¼Ð°ÑÐ¸Ð·Ð°ÑÐ¸Ð¸ ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð½Ð° Ð¿ÑÐ¾Ð½Ð¸ÐºÐ½Ð¾Ð²ÐµÐ½Ð¸Ðµ. Ð ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ» ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½ ÑÐ¿Ð¾ÑÐ¾Ð± Ð´Ð»Ñ Ð°Ð²ÑÐ¾Ð¼Ð°ÑÐ¸Ð·Ð°ÑÐ¸Ð¸ ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð½Ð° Ð¿ÑÐ¾Ð½Ð¸ÐºÐ½Ð¾Ð²ÐµÐ½Ð¸Ðµ Ð´ÐµÑÐµÐ½ÑÑÐ°Ð»Ð¸Ð·Ð¾Ð²Ð°Ð½Ð½ÑÑ ÐºÐ¸Ð±ÐµÑÑÐ¸Ð·Ð¸ÑÐµÑÐºÐ¸Ñ ÑÐ¸ÑÑÐµÐ¼, Ð¿ÑÐ¾Ð´ÐµÐ¼Ð¾Ð½ÑÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð° Ð¾ÑÐµÐ½ÐºÐ° ÑÐ¿Ð¾ÑÐ¾Ð±Ð°. ÐÐ¾Ð»ÑÑÐµÐ½Ð½ÑÐµ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÑ Ð¼Ð¾Ð³ÑÑ Ð±ÑÑÑ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ñ Ð´Ð»ÑÂ  ÑÐ»ÑÑÑÐµÐ½Ð¸Ñ Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð°Ð²ÑÐ¾Ð¼Ð°ÑÐ¸Ð·Ð°ÑÐ¸Ð¸ ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð½Ð° Ð¿ÑÐ¾Ð½Ð¸ÐºÐ½Ð¾Ð²ÐµÐ½Ð¸Ðµ Ð´ÐµÑÐµÐ½ÑÑÐ°Ð»Ð¸Ð·Ð¾Ð²Ð°Ð½Ð½ÑÑ ÐÐ¤Ð¡.
description: The aim of the work is to use machine learning to automate penetration testing of decentralized cyber-physical systems. The subject of the research is modern methods of automated penetration testing. The tasks addressed during the research are: 1. Building a threat model for decentralized cyber-physical systems. 2. Analysis of methods for automating penetration testing and their applicability to decentralized cyber-physical systems. 3. Development of a method for automating penetration testing of decentralized cyber-physical systems based on machine learning. 4. Experimental evaluation of the developed method using the example of identifying radio channel vulnerabilities. During the work, a resulting threat model table for decentralized cyber-physical systems was developed. The features of conducting penetration testing on decentralized cyber-physical systems and current research in the field of penetration testing automation were analyzed. As a result, a method for automating penetration testing for decentralized cyber-physical systems was developed, and an evaluation of the method was demonstrated. The results of this work can be used to improve methods for automating penetration testing for decentralized cyber-physical systems.