Automation of the Information Collection Process by Osint Methods for Penetration Testing During Information Security Audit

作者：Anton O. Bryushinin, Alexander V. Dushkin, Maxim A. Melshiyan · 发表于：2022 Conference of Russian Young Researchers in Electrical and Electronic Engineering (ElConRus) · 年份：2022 · DOI：10.1109/elconrus54750.2022.9755812 · 被引用次数：9 · 研究领域：Economic and Technological Systems Analysis、Engineering Education and Technology、Economic and Technological Developments in Russia

The purpose of this article is to consider one of the options for automating the process of collecting information from open sources when conducting penetration testing in an organization's information security audit using the capabilities of the Python programming language. Possible primary vectors for collecting information about the organization, personnel, software, and hardware are shown. The basic principles of operation of the software product are presented in a visual form, which allows automated analysis of information from open sources about the object under study.