Intelligence Informed Scenario-Based Pentesting Tool

点击翻译按钮获取中文摘要

To transform cyber-security penetration testing (pentesting) from "test and fix" to a "threat intelligence" approach that will continually assess risk, prioritise and interactions to provide greater security to clients.Traditional pentesting shows vulnerabilities without any risk prioritisation. It is important in larger organisations to have a resource-efficient solution to fix the key vulnerabilities. The market requires a more accurate risk prioritisation than the existing testing methodologies. Hence, there is need to develop innovative ways of pentesting, using threat-intelligence led scenario-based testing.This project aims to develop methodologies to launch a novel pentesting product based on cyber-threat intelligence analysis that includes identifying relevant threats, particularly in areas such as the dark web, which could pose a threat to businesses. The intelligence sought would be used to deliver simulated attacks scenario to test an organisation's ability to respond and defend. This will be a pre-emptive approach that will allow organisations to address threats before a vulnerability is exposed either through penetration testing or external attacks. Visualisation of the threat intelligence into scenario-based testing to see how a company can respond to specific threats is an innovative step change in the industry and will improve the pentesting methodologies currently used on the market.