Patent Document ID: 8490196
Application ID: 12851516

Base Claim:
1. A method for extending automated penetration testing of a target network comprising, the steps of: a. computing a scenario, wherein the step of computing the scenario comprises the steps of i. translating a workspace having at least one target computer in the target network, to a planning definition language; ii. translating penetration modules available in a penetration testing framework to the planning definition language; and iii. defining a goal in the target network and translating the goal into the planning definition language; b. building a knowledge database with information regarding the target network, properties of hosts in the network, parameters and running history of modules in the penetration testing framework; and c. running an attack plan solver module, wherein the attack plan solver module performs the steps of: i. running an attack planner using the scenario as input, to produce at least one attack plan that achieves the goal; and ii. executing actions defined in the at least one attack plan against the target network from the penetration testing framework.

---

Claim 11:
11. The method of claim 1 wherein the attack plan softer module comprises a pre-planner processor module that uses information available in the knowledge database and the scenario, which is in the planning definition language, to modify the scenario.