Open AccessVIRTUAL LABORATORY CREATION FOR DISTRIBUTED INFORMATION SYSTEM SAFETY TESTING
Author(s) -
Andrey Krasov,
S. I. Shterenberg,
Andrey Moskal'chuk
Publication year - 2020
Publication title -
vestnik brânskogo gosudarstvennogo tehničeskogo universiteta
Language(s) - English
Resource type - Journals
ISSN - 1999-8775
DOI - 10.30987/1999-8775-2020-3-38-46
Subject(s) - computer science , scripting language , copying , virtual laboratory , correctness , laboratory safety , hacker , license , software , virtual machine , software engineering , computer security , multimedia , operating system , medicine , political science , law , programming language , nuclear medicine
In view of the growth of scale and significance of information structure the problem in ensuring information safety and skilled technician training in this field becomes more and more urgent. A virtual laboratory within the use of which one could carry out own investigations will render in this work a considerable assistance.
In this paper there is described a method for virtual laboratory creation with the aid of which it would be possible to carry out testing for penetration and to analyze methods ensuring safety for information systems. In the course of this laboratory creation there was used license software taking into account system requirements of the computer in which this laboratory was accommodated.
Further in this paper there was considered a method for penetration testing on Metasploitable 2 vulnerable machine pre-configured. Next stage of the work consists in the realization and thorough consideration of potentialities in the application of the created laboratory for the simulation of own scripts by the example of Drupal vulnerable version. In the course of the operation there was shown a code for Python allowing the fulfillment of remote code carrying out.
The purpose of this work was the formation of environment allowing the mastery for hacker’s action estimate and the analysis the origin of system certain vulnerable places. The actual skills obtained will render assistance in the information safety increase of actual information systems.