title: ÐÐ¾Ð´Ð´ÐµÑÐ¶ÐºÐ° Ð¿ÑÐ¸Ð½ÑÑÐ¸Ñ ÑÐµÑÐµÐ½Ð¸Ð¹ Ð¿ÑÐ¸ ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ð¸ Ð½Ð° Ð¿ÑÐ¾Ð½Ð¸ÐºÐ½Ð¾Ð²ÐµÐ½Ð¸Ðµ
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° ÑÐ¿ÐµÑÐ¸Ð°Ð»Ð¸ÑÑÐ°
titleType: Subtitle
title: Decision support for penetration testing
Creators: name: ÐÐµÑÑÐ¸ÐµÐ², Ð Ð¾Ð¼Ð°Ð½
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2022
Subjects: ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ðµ Ð½Ð° Ð¿ÑÐ¾Ð½Ð¸ÐºÐ½Ð¾Ð²ÐµÐ½Ð¸Ðµ
Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ðµ ÑÐµÑÐµÐ²ÑÑ Ð°ÑÐ°Ðº
ÑÐ¸ÑÑÐµÐ¼Ð° Ð¿Ð¾Ð´Ð´ÐµÑÐ¶ÐºÐ¸ Ð¿ÑÐ¸Ð½ÑÑÐ¸Ñ ÑÐµÑÐµÐ½Ð¸Ð¹
ÑÑÐ°Ð²Ð½ÐµÐ½Ð¸Ðµ Ð³ÑÐ°ÑÐ¾Ð²
Ð¿ÑÐµÑÐµÐ´ÐµÐ½ÑÐ½ÑÐ¹ Ð°Ð½Ð°Ð»Ð¸Ð·
penetration testing
network attack detection
decision support system
graph comparision
case analysis

description: ÐÑÐµÐ´Ð¼ÐµÑÐ¾Ð¼ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ ÑÐ²Ð»ÑÐµÑÑÑ Ð°Ð»Ð³Ð¾ÑÐ¸ÑÐ¼ ÑÑÐ°Ð²Ð½ÐµÐ½Ð¸Ñ Ð³ÑÐ°ÑÐ¾Ð², Ð¾Ð¿ÑÐµÐ´ÐµÐ»ÑÑÑÐ¸Ð¹ Ð¾ÑÐµÐ½ÐºÑ Ð¸Ñ ÑÑÐ¾Ð´ÑÑÐ²Ð°, Ð´Ð»Ñ Ð¿Ð¾ÑÐ»ÐµÐ´ÑÑÑÐµÐ³Ð¾ Ð²Ð½ÐµÑÐµÐ½Ð¸Ñ Ð² Ð±Ð°Ð·Ñ Ð·Ð½Ð°Ð½Ð¸Ð¹. Ð¦ÐµÐ»Ñ ÑÐ°Ð±Ð¾ÑÑ Ð¿Ð¾Ð²ÑÑÐµÐ½Ð¸Ðµ ÑÐ¾ÑÐ½Ð¾ÑÑÐ¸ Ð¿Ð¾Ð¸ÑÐºÐ° ÑÑÐ¾Ð¶Ð¸Ñ Ð¿ÑÐµÑÐµÐ´ÐµÐ½ÑÐ¾Ð² Ð¿ÑÐ¸ ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ð¸ Ð½Ð° Ð¿ÑÐ¾Ð½Ð¸ÐºÐ½Ð¾Ð²ÐµÐ½Ð¸Ðµ Ð¿ÑÑÐµÐ¼ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° ÑÐ²ÑÐ·ÐµÐ¹ Ð³ÑÐ°ÑÐ° Ð¿ÑÐµÑÐµÐ´ÐµÐ½ÑÐ°. ÐÐ°Ð´Ð°ÑÐ¸, ÐºÐ¾ÑÐ¾ÑÑÐµ ÑÐµÑÐ°Ð»Ð¸ÑÑ Ð² ÑÐ¾Ð´Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ. 1. ÐÑÐ¾Ð°Ð½Ð°Ð»Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°ÑÑ ÑÑÑÐµÑÑÐ²ÑÑÑÐ¸Ðµ ÑÐ¿Ð¾ÑÐ¾Ð±Ñ Ð°Ð²ÑÐ¾Ð¼Ð°ÑÐ¸Ð·Ð°ÑÐ¸Ð¸ ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð½Ð° Ð¿ÑÐ¾Ð½Ð¸ÐºÐ½Ð¾Ð²ÐµÐ½Ð¸Ðµ. 2. ÐÑÐ±Ð¾Ñ Ð¸ ÑÐµÐ°Ð»Ð¸Ð·Ð°ÑÐ¸Ñ ÑÐ¿Ð¾ÑÐ¾Ð±Ð° Ð¿Ð¾Ð²ÑÑÐµÐ½Ð¸Ñ ÑÑÑÐµÐºÑÐ¸Ð²Ð½Ð¾ÑÑÐ¸, Ð¿Ð¾Ð¸ÑÐºÐ° ÑÑÐ¾Ð¶Ð¸Ñ Ð¿ÑÐµÑÐµÐ´ÐµÐ½ÑÐ¾Ð² Ð¿ÑÐ¸ ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ð¸ Ð½Ð° Ð¿ÑÐ¾Ð½Ð¸ÐºÐ½Ð¾Ð²ÐµÐ½Ð¸Ðµ. 3. Ð­ÐºÑÐ¿ÐµÑÐ¸Ð¼ÐµÐ½ÑÐ°Ð»ÑÐ½Ð¾ Ð¿ÑÐ¾ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°ÑÑ Ð°Ð»Ð³Ð¾ÑÐ¸ÑÐ¼ Ð¿Ð¾Ð¸ÑÐºÐ° ÑÑÐ¾Ð¶Ð¸Ñ Ð¿ÑÐµÑÐµÐ´ÐµÐ½ÑÐ¾Ð². ÐÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ðµ Ð¿ÑÐ¾Ð¸Ð·Ð²ÐµÐ´ÐµÐ½Ð¾ Ð½Ð° Ð±Ð°Ð·Ðµ ÑÐ¸ÑÑÐµÐ¼Ñ Ð¿Ð¾Ð´Ð´ÐµÑÐ¶ÐºÐ¸ Ð¸ Ð¿ÑÐ¸Ð½ÑÑÐ¸Ñ ÑÐµÑÐµÐ½Ð¸Ð¹ Â«Intelligent data analysis in decision support systems for penetration testsÂ». ÐÑÐ» ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½ Ð½Ð¾Ð²ÑÐ¹ Ð°Ð»Ð³Ð¾ÑÐ¸ÑÐ¼ ÑÑÐ°Ð²Ð½ÐµÐ½Ð¸Ñ Ð³ÑÐ°ÑÐ¾Ð² Ñ ÑÐµÐ»ÑÑ Ð¾ÑÐµÐ½ÐºÐ¸ Ð¸Ñ ÑÑÐ¾Ð¶ÐµÑÑÐ¸ Ð´Ð»Ñ Ð²Ð½ÐµÑÐµÐ½Ð¸Ñ Ð½Ð¾Ð²ÑÑ Ð´Ð°Ð½Ð½ÑÑ Ð² Ð±Ð°Ð·Ñ Ð·Ð½Ð°Ð½Ð¸Ñ ÑÐ¸ÑÑÐµÐ¼Ñ. ÐÐ½Ð°Ð»Ð¸Ð· Ð¿ÑÐ¾Ð¸Ð·Ð²Ð¾Ð´Ð¸Ð»ÑÑ Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ ÑÐ¸ÑÑÐµÐ¼Ñ Ð³ÑÐ°ÑÐ¾Ð², ÑÐ¾ÑÑÐ°Ð²Ð»ÐµÐ½Ð½Ð¾Ð¹ Ñ ÑÑÐµÑÐ¾Ð¼ ÑÐ»Ð°Ð±ÑÑ Ð¼ÐµÑÑ ÑÑÐ°Ð²Ð½Ð¸Ð²Ð°ÐµÐ¼ÑÑ Ð³ÑÐ°ÑÐ¾Ð². Ð ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ Ð±ÑÐ» Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½ Ð½Ð¾Ð²ÑÐµ Ð¸ Ð¸ÑÑÐ¾Ð´Ð½ÑÐ¹ Ð°Ð»Ð³Ð¾ÑÐ¸ÑÐ¼Ñ. ÐÑÐ¾Ð°Ð½Ð°Ð»Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ñ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÑ ÑÐ°Ð±Ð¾ÑÑ Ð°Ð»Ð³Ð¾ÑÐ¸ÑÐ¼Ð¾Ð² Ð¸ Ð½Ð° Ð¸Ñ Ð¾ÑÐ½Ð¾Ð²Ð°Ð½Ð¸Ð¸ Ð±ÑÐ»Ð¾ Ð²ÑÑÑÐ½ÐµÐ½Ð¾, ÑÑÐ¾ Ð¿Ð¾Ð»ÑÑÐµÐ½Ð½ÑÐ¹ Ð°Ð»Ð³Ð¾ÑÐ¸ÑÐ¼ Ð¸ ÑÐ¾Ð·Ð´Ð°Ð½Ð½Ð°Ñ Ð´Ð»Ñ Ð½ÐµÐ³Ð¾ Ð¼Ð¾Ð´Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ñ ÑÐ¿ÑÐ°Ð²Ð»ÑÑÑÑÑ ÑÐ¾ ÑÐ²Ð¾ÐµÐ¹ Ð·Ð°Ð´Ð°ÑÐµÐ¹ Ð»ÑÑÑÐµ, Ð»Ð¸Ð±Ð¾ ÑÐ°ÐºÐ¶Ðµ ÐºÐ°Ðº Ð¸ Ð¸ÑÑÐ¾Ð´Ð½ÑÐ¹ Ð°Ð»Ð³Ð¾ÑÐ¸ÑÐ¼. Ð ÐµÐ·ÑÐ»ÑÑÐ°ÑÑ ÐÐÐ  Ð¼Ð¾Ð³ÑÑ Ð±ÑÑÑ Ð¿ÑÐ¸Ð¼ÐµÐ½ÐµÐ½Ñ Ð´Ð»Ñ ÑÐ»ÑÑÑÐµÐ½Ð¸Ñ ÑÑÑÐµÑÑÐ²ÑÑÑÐµÐ¹ Ð¡ÐÐÐ  Ð¿ÑÐ¸ ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ð¸ Ð½Ð° Ð¿ÑÐ¾Ð½Ð¸ÐºÐ½Ð¾Ð²ÐµÐ½Ð¸Ðµ.
description: The subject of the research is an algorithm for comparing graphs, which determines the assessment of their similarity, for subsequent inclusion in the knowledge base. The purpose of the work is to improve the accuracy of searching for similar precedents in penetration testing by analyzing the connections of the precedent graph. The research set the following goals: 1. Analyze existing ways to automate penetration testing. 2. Selection and implementation of a way to increase efficiency, search for similar precedents in penetration testing. 3. Experimental testing the algorithm for searching for similar precedents. The study was carried out on the basis of the support and decision-making system "Intelligent data analysis in decision support systems for penetration tests". A new algorithm for comparing graphs was developed in order to assess their similarity in order to introduce new data into the knowledge base of the system. The analysis was carried out on the basis of a system of graphs, compiled taking into account the weaknesses of the compared graphs. As a result, new and original algorithms were investigated. The results of the algorithms were analyzed and, on their basis, it was found that the resulting algorithm and the modification created for it cope with their task better, or as well as the original algorithm. The results of this work can be used to improve the existing DSS for penetration testing.