Goal-Directed Systems Testing: Automated Execution of Intelligently Generated Cyber Attack Plans

Red teaming, in which a team of professional hackers emulate an adversary in order to attempt to penetrate a network, has emerged as a vital tool in the cybersecurity industry to identify deficiencies in network defenses. Yet, hiring or maintaining a red team requires a substantial investment of time and money, and frequently such penetration testing proves non-comprehensive [1]. The major contribution of this project is to develop the foundations of an end-to-end process to automate adversarial emulation of systematically generated attack plans. Dr. Howard Shrobe has developed an intelligent attack generation tool, AttackPlanner, that exhaustively enumerates possible attack paths by which an adversary could attempt to achieve a high-level goal [2]. Built around observed adversarial tactics, techniques, and procedures identified in the ATT&CK Matrix [3], MITRE’s CALDERA is a robust automated, post-compromise, adversary emulation framework which allows users to autonomously execute cyber attacks [4]. By coupling AttackPlanner with CALDERA, we have demonstrated the ability to autonomously execute intelligently generated cyber attack plans. With further work on this project, the ultimate product would provide an automated, goal-directed systems testing capability.

Name thesis:degree_name

Master

Department dc:contributor.department

Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science

Grantor dc:publisher

Massachusetts Institute of Technology

Year dc:date.issued

2021

Author dc:creator

• Dorchuck, Samuel Joseph

Advisor dc:contributor.advisor

• Shrobe, Howard

Statement dc:rights

• In Copyright - Educational Use Permitted
• Copyright MIT

Licence dc:rights.uri

• http://rightsstatements.org/page/InC-EDU/1.0/

Handle dc:identifier.uri

https://hdl.handle.net/1721.1/139911

OAI identifier oai:identifier

oai:dspace.mit.edu:1721.1/139911