A systematic literature review and meta-analysis on artificial intelligence in penetration testing and vulnerability assessment. (May 2019)

• Record Type: Journal Article
• Authors: McKinnel, Dean Richard; Dargahi, Tooska; Dehghantanha, Ali; Choo, Kim-Kwang Raymond
• Is Part Of: Computers & electrical engineering. Volume 75(2019)
• Page Start: 175
• Page End: 188
• Publication Date: 2019-05
• Subjects: Penetration testing -- Vulnerability assessment -- Artificial intelligence -- Systematic literature review -- Machine learning -- Meta-analysis; Computer engineering -- Periodicals; Electrical engineering -- Periodicals; Electrical engineering -- Data processing -- Periodicals; Ordinateurs -- Conception et construction -- Périodiques; Électrotechnique -- Périodiques; Électrotechnique -- Informatique -- Périodiques; Computer engineering; Electrical engineering; Electrical engineering -- Data processing; Periodicals; Electronic journals; 621.302854
• DOI: 10.1016/j.compeleceng.2019.02.022
• Languages: English
• ISSNs: 0045-7906

Abstract

Highlights: Artificial intelligence in penetration testing and vulnerability assessment. Literature review of penetration testing and vulnerability assessment. Exploitation and vulnerability analysis against test networks. Abstract: Vulnerability assessment (e.g., vulnerability identification and exploitation; also referred to as penetration testing) is a relatively mature industry, although attempting to keep pace with the diversity of computing and digital devices that need to be examined is challenging. Hence, there has been ongoing interest in exploring the potential of artificial intelligence to enhance penetration testing and vulnerability identification of systems, as evidenced by the systematic literature review performed in this paper. In this review, we focus only on empirical papers, and based on the findings, we identify a number of potential research challenges and opportunities, such as scalability and the need for real-time identification of exploitable vulnerabilities.