SEEMA: An Automation Framework for Vulnerability Assessement and Penetration Testing

Abstract

The world has witnessed an exponential increase in the number of Internet Connected Computers due to various causes. This exponential increase and the resulting dependence have had far reaching cybersecurity implications. The primary implication being exponential rise in cybercrime which necessitates the vulnerability assessment and penetration testing (VAPT). The vulnerability assessment and penetration testing aids in offsetting any liability associated with a successful attack on an organization's asset. The current frameworks and tool available for VAPT require very high expert knowledge and are predominantly manual. Moreover, some tools available automate only certain phases of VAPT but not the whole process. This mismatch provides the opportunity to create a solution by automating the whole process while lowering the knowledge threshold. Thus, this paper provides a revamped automated framework for a novice individual and a cybersecurity professional's use. It also provides a framework for commercial use which leverages multi-agent system and certain aspects of full stack monitoring.