Abstract
This thesis presents the design and implementation of an attack system to provide the XML-based attack language and the stateful attack generator. By using XML, the attack description language becomes more readable and flexible. The language can help us describe security exploits and attack procedures. As long as analyze the procedures and signatures of the network attacks, the users can describe the attacks with the XML-based attack language to generate real network attacks. Mapping from known vulnerability to the state-transition diagram will help the users more easily use the XML-based attack language to describe network attacks. The attack system can generate attacks automatically with the attack description language. Based on the state transition diagram to write XML attack files, the system can not only generate single packets but also make a connection to do stateful attack-FTP and HTTP attack cases.