Abstract: Penetration testing is one of the most popular methods of assuring network security. The current process of penetration testing is refined in this paper, the deficiencies of traditional penetration testing model is discussed, and the attack testing colored Petri net used for network attack simulation and organization of the testing is presented. It discusses the integration of different attack scenario and generation of testing case. A example is provided to illustrate its application.

Key words: penetration test, network attack, attack model, Petri net

摘要： 渗透测试是常用的网络安全保障方法。该文细化现有渗透测试过程，针对传统渗透测试模型存在的不足提出一种基于有色Petri网的攻击测试网模型，用于模拟网络攻击并组织测试过程。探讨不同攻击场景的合成规则和测试用例的生成，结合实例分析其在渗透测试中的应用。

关键词: 渗透测试, 网络攻击, 攻击模型, Petri网

CLC Number: 

• TP393.08