1. A method for extending automated penetration testing of a target network comprising, the steps of: a. computing a scenario, wherein the step of computing the scenario comprises the steps of i. translating a workspace having at least one target computer in the target network, to a planning definition language; ii. translating penetration modules available in a penetration testing framework to the planning definition language; and iii. defining a goal in the target network and translating the goal into the planning definition language; b. building a knowledge database with information regarding the target network, properties of hosts in the network, parameters and running history of modules in the penetration testing framework; and c. running an attack plan solver module, wherein the attack plan solver module performs the steps of: i. running an attack planner using the scenario as input, to produce at least one attack plan that achieves the goal; and ii. executing actions defined in the at least one attack plan against the target network from the penetration testing framework.
1. A method for extending automated penetration testing of a target network comprising, the steps of: a. computing a scenario, wherein the step of computing the scenario comprises the steps of i. translating a workspace having at least one target computer in the target network, to a planning definition language; ii. translating penetration modules available in a penetration testing framework to the planning definition language; and iii. defining a goal in the target network and translating the goal into the planning definition language; b. building a knowledge database with information regarding the target network, properties of hosts in the network, parameters and running history of modules in the penetration testing framework; and c. running an attack plan solver module, wherein the attack plan solver module performs the steps of: i. running an attack planner using the scenario as input, to produce at least one attack plan that achieves the goal; and ii. executing actions defined in the at least one attack plan against the target network from the penetration testing framework. 9. The method of claim 1 , wherein the attack plan solver module updates the knowledge base after each action is executed.