Multi-view network attack and defense simulation system

Abstract

This application relates to a multi-view network attack and defense simulation system. The system includes: a network information environment module for configuring hardware information and software information, and establishing a network information system model through the hardware information and software information; a background traffic module for simulating user behavior information in the network environment to obtain Background traffic model; attack and defense module, used to establish network threat model according to network threat behavior and network defense model according to network defense behavior; simulation module, used to establish network information system model, background traffic model, network threat model and network defense model, Build an adaptive network attack and defense model; obtain pre-set network attack and defense simulation data, input the network attack and defense simulation data into the network attack and defense adaptive model, and output network attack and defense element data. Using this method can easily realize network attack and defense deduction.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to a multi-view network attack and defense simulation system. Background technique [0002] Network attack and defense modeling can be applied to many fields such as network defense gap cognition, system security engineering, and network attack and defense simulation. [0003] To best understand the security of networked information systems, network defenders often use offensive testing techniques and assessments. These types of cybersecurity assessments come in many forms, from penetration testing to full-scale red teams and even adversary simulation exercises. Cyber ​​offensive testing can provide defenders with an attacker's perspective on network operational weaknesses, with clear benefits for defenders. , but these tests are becoming more and more expensive, time-consuming and limited by the tester's skill level, practical use may be difficult. Simulation e...

AI Technical Summary

Problems solved by technology

If only from the perspective of attack, static description, it is difficult to understand the whole picture of the network attack and defense process, and the established model is also difficult to directly conduct network attack and defense deduction

Images