Network attack and defense deduction platform based on simulation experiment design

Abstract

The invention relates to a network attack and defense deduction platform based on simulation experiment design. The network attack and defense deduction platform comprises a model editing module usedfor editing an entity model required by network attack and defense simulation in a visual mode; a model assembling module used for combining the modularized solid models to generate a solid template running in a simulation environment; an experiment design module used for extracting uncertainty factors in network attack and defense from the entity template library as experiment factors; and an operation module used for constructing an attack and defense scene according to the simulation experiment instance, and calling an entity model and an entity template from an attack and defense templatelibrary to construct a simulation scene. A simulation kernel scheduling model is driven to run in the simulation scene according to the attack and defense scene, and the analysis module is used for analyzing the simulation interaction data in a statistical mode to obtain attack and defense elements playing a key role in network security. By adopting the method, the network aggressivity test can berealized.

Description

Technical field[0001]This application relates to the field of network security simulation technology, and in particular to a network attack and defense deduction platform based on simulation experiment design.Background technique[0002]With the widespread application of network technology, network security issues are constantly emerging. Compared with the attacker, the attacker only needs to break through a certain link in the entire network at a certain period of time to achieve the purpose of the attack. The defender needs to maintain all links of the network around the clock. Safe operation, so the defender is often in a passive response position, posing a major challenge to the maintenance of network security. In order to best evaluate the security of the network information system that needs to be protected, network defenders often use offensive testing techniques and evaluation methods. These types of network security assessments come in many forms, from penetration testing to ...

AI Technical Summary

Problems solved by technology

These types of cybersecurity assessments come in many forms, from penetration testing to full-scale red teams and even adversary simulation exercises. Cyber ​​offensive testing can provide defenders with an attacker's perspective on network operational weaknesses, with clear benefits for defenders. , but these tests are expensive, time-consuming and limited by the technical level of the testers, making it difficult to use them in practice

Images