Method for monitoring the sequence of implementation of attacking actions during an active analysis of the security of corporate networks

Abstract

The article proposes an approach to increase the efficiency of vulnerability validation during automatic active analysis of security of corporate networks based on control of the sequence of implementation of offensive actions (exploits) according to softmax action selection strategy using Gibbs probability distribution. At the same time, based on a practical analysis of the process of validation of vulnerabilities, the coefficient of erroneous decisions on the implementation of the exploit was introduced, which allows to dynamically change the key parameter of the Gibbs distribution - temperature, which in turn balances the probability of choosing the next attack. when implementing the validation of the identified vulnerabilities of a specific target system.