Optimizing the Sequence of Vulnerability Scanning Injections

Security Operation Centers face human resource bottleneck in scaling the operations. We attempt to address the issue by developing a framework to prioritize the operational actions, especially in vulnerability scanning and penetration testing tasks. More specifically, we prioritized scanning injections in the order of expected rewards, calculated with the combination of priors and injection-to-injection similarity measures. The framework is shown to reduce the total number of actions while maintaining the amount of vulnerabilities revealed.