Intelligence Informed Scenario-Based Pentesting Tool

将网络安全渗透测试（pentesting）从“测试和修复”转变为“威胁情报”方法，持续评估风险、优先排序和交互，为客户提供更大的安全性。传统的渗透测试在没有任何风险优先级的情况下显示漏洞。在大型组织中，有一个资源高效的解决方案来修复关键漏洞是很重要的。市场需要比现有测试方法更准确的风险优先级。因此，有必要开发渗透测试的创新方法，使用威胁情报主导的基于场景的测试。该项目旨在开发方法，推出一种基于网络威胁情报分析的新型渗透测试产品，包括识别相关威胁，特别是在暗网等可能对企业构成威胁的领域。所寻求的情报将用于提供模拟攻击场景，以测试组织的响应和防御能力。这将是一种先发制人的方法，允许组织在漏洞通过渗透测试或外部攻击暴露之前解决威胁。将威胁情报可视化到基于场景的测试中，以了解公司如何应对特定的威胁，这是行业中的一个创新步骤，将改进目前市场上使用的渗透测试方法。

To transform cyber-security penetration testing (pentesting) from "test and fix" to a "threat intelligence" approach that will continually assess risk, prioritise and interactions to provide greater security to clients.Traditional pentesting shows vulnerabilities without any risk prioritisation. It is important in larger organisations to have a resource-efficient solution to fix the key vulnerabilities. The market requires a more accurate risk prioritisation than the existing testing methodologies. Hence, there is need to develop innovative ways of pentesting, using threat-intelligence led scenario-based testing.This project aims to develop methodologies to launch a novel pentesting product based on cyber-threat intelligence analysis that includes identifying relevant threats, particularly in areas such as the dark web, which could pose a threat to businesses. The intelligence sought would be used to deliver simulated attacks scenario to test an organisation's ability to respond and defend. This will be a pre-emptive approach that will allow organisations to address threats before a vulnerability is exposed either through penetration testing or external attacks. Visualisation of the threat intelligence into scenario-based testing to see how a company can respond to specific threats is an innovative step change in the industry and will improve the pentesting methodologies currently used on the market.