In EDS ansehen

Bridging the Gap: A Survey and Classification of Research-Informed Ethical Hacking Tools.

Gespeichert in:
Bibliographische Detailangaben
Titel: Bridging the Gap: A Survey and Classification of Research-Informed Ethical Hacking Tools.
Autoren: Modesti, Paolo, Golightly, Lewis, Holmes, Louis, Opara, Chidimma, Moscini, Marco
Quelle: Journal of Cybersecurity & Privacy; Sep2024, Vol. 4 Issue 3, p410-448, 39p
Schlagwörter: PENETRATION testing (Computer security), SOURCE code, COMPUTER software, CLASSIFICATION, SURVEYS
Abstract: The majority of Ethical Hacking (EH) tools utilised in penetration testing are developed by practitioners within the industry or underground communities. Similarly, academic researchers have also contributed to developing security tools. However, there appears to be limited awareness among practitioners of academic contributions in this domain, creating a significant gap between industry and academia's contributions to EH tools. This research paper aims to survey the current state of EH academic research, primarily focusing on research-informed security tools. We categorise these tools into process-based frameworks (such as PTES and Mitre ATT&CK) and knowledge-based frameworks (such as CyBOK and ACM CCS). This classification provides a comprehensive overview of novel, research-informed tools, considering their functionality and application areas. The analysis covers licensing, release dates, source code availability, development activity, and peer review status, providing valuable insights into the current state of research in this field. [ABSTRACT FROM AUTHOR]
Copyright of Journal of Cybersecurity & Privacy is the property of MDPI and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)
Datenbank: Complementary Index
Beschreibung
Abstract:The majority of Ethical Hacking (EH) tools utilised in penetration testing are developed by practitioners within the industry or underground communities. Similarly, academic researchers have also contributed to developing security tools. However, there appears to be limited awareness among practitioners of academic contributions in this domain, creating a significant gap between industry and academia's contributions to EH tools. This research paper aims to survey the current state of EH academic research, primarily focusing on research-informed security tools. We categorise these tools into process-based frameworks (such as PTES and Mitre ATT&CK) and knowledge-based frameworks (such as CyBOK and ACM CCS). This classification provides a comprehensive overview of novel, research-informed tools, considering their functionality and application areas. The analysis covers licensing, release dates, source code availability, development activity, and peer review status, providing valuable insights into the current state of research in this field. [ABSTRACT FROM AUTHOR]
ISSN:2624800X
DOI:10.3390/jcp4030021