Development of an Autonomous Retesting Penetration Testing Paradigm

This paper presents a paradigm for automating penetration testing for the purpose of retesting systems to ensure that previously detected issues have not been reintroduced. This approach, which is patterned off of path-based attack techniques, is described and an implementation of the proposed paradigm, using the Blackboard Architecture, is presented. The efficiencies and potential pathway to more automated testing provided by the proposed paradigm are also discussed.