Abstract: As an important part of penetration testing, the penetration test attack model has attracted the common attention of academia and industry. Existing penetration test attack models do not take into account the dynamic parameters in the penetration test attack process, and cannot describe when the vulnerability occurred. Taking the vulnerability as the basic unit, and the time interval of the place in the timed Petri net representing the occurrence interval of the vulnerability, this paper builds a penetration test attack model based on the timed Petri net. First, the vulnerability list is used as input to build a single vulnerability model. Then, the single vulnerability model collection is used to form a complete penetration test attack model through a model integration algorithm. Finally, the algorithm of penetration attack path selection is given, and the effectiveness of the algorithm of penetration attack path selection proposed in this paper is verified by simulation experiments.

Key words: timed Petri net, penetration test, vulnerability model