Network security simulation system

Abstract

The invention discloses a network security simulation system. The network security system comprises a network attack simulation subsystem, a risk simulation subsystem and a security defense simulationsubsystem, wherein the risk simulation subsystem is used for building a risk simulation environment; the network attack simulation subsystem is used for providing a plurality of attack tools and attack parameters to attack a target object selected by a user in a risk simulation environment, and record an attack process and an attack result; and the security defense simulation subsystem is used for judging whether a security defense strategy of the target object needs to be adjusted or not according to the attack result, and giving a determined security defense strategy if adjustment is needed. The network security simulation system integrates a plurality of attack tools, has a security rule knowledge base, and can simulate a plurality of attack scenes and adjust the security defense strategy.

Description

technical field [0001] The invention relates to a network security simulation system, which belongs to the field of network security. Background technique [0002] The network security simulation environment construction method automatically constructs and tests the network environment, establishes a security risk simulation basic environment, constructs a corresponding attack model based on the network attack attack input, attack process and external environment analysis, and conducts network attack simulation; researches network system defense models and Methods: Analyze system defense node deployment and defense strength, obtain network performance data and security protection equipment performance data on the basis of automatic / semi-automatic attack simulation, and obtain attack simulation execution information through multiple comparative experiments. [0003] At present, most of the security testing and experimental environments at home and abroad are manually built, w...

AI Technical Summary

Problems solved by technology

[0003] At present, most of the security testing and experimental environments at home and abroad are manually built, which is time-consuming and labor-intensive, and configuration changes are troublesome; the attack drill technology is relatively developed, but the attack tool has a single function and can only carry out certain types of attacks, and there is no integrated attack Tools; attack drills with similar functions. Shooting range products are mainly for competition and teaching, not engineering application products, with limited attack simulation scenarios and lack of data management functions; attack drills are limited to security attacks in specific network scenarios Testing lacks the adjustment function of defensive measures; cannot record and manage offensive and defensive data, cannot establish a security rule knowledge base based on offensive and defensive big data, and cannot form expert knowledge

Images