网络渗透测试作为安全测试的一种重要手段,越来越受到重视。设计了网络渗透测试的实施流程,提出了可复用的渗透测试用例管理框架,并对测试过程的风险进行分析,总结了风险规避方法。 Network penetration testing as an important means of security testing, more and more attention. The implementation process of network penetration testing is designed. A reusable management framework of penetration test cases is proposed. The risk of testing process is analyzed and the risk aversion method is summarized.