Network attack and defense deduction platform based on simulation experiment design

Abstract

This application relates to a network attack and defense deduction platform based on simulation experiment design. The network attack and defense deduction platform includes: a model editing module is used to edit the required physical model of the network attack and defense simulation in a visual manner; the model assembly module combines the componentized physical models to generate a physical template that operates in a simulation environment; experimental design The module is used to extract the uncertain factors in the network attack and defense from the entity template library as the experimental factors; the operation module is used to construct the attack and defense scenarios according to the simulation experiment examples, and call the entity model and the entity template from the attack and defense template library to construct the simulation scenario; In the simulation scenario, the simulation kernel scheduling model is driven according to the attack and defense scenario, and the analysis module is used to analyze the simulation interaction data through statistical methods to obtain the attack and defense elements that play a key role in network security. The network attack test can be realized by adopting the method.

Description

technical field [0001] This application relates to the technical field of network security simulation, in particular to a network attack and defense deduction platform based on simulation experiment design. Background technique [0002] With the wide application of network technology, network security problems are emerging one after another. Compared with the attacker, it only needs to break through a certain link in the entire network at a certain period of time to achieve the attack purpose. The defender needs to maintain the security of all links in the network around the clock. Therefore, the defender is often in a passive position, which poses a major challenge to the maintenance of network security. To best assess the security of the networked information systems that need to be protected, network defenders often use offensive testing techniques and assessments. These types of cybersecurity assessments come in many forms, from penetration testing to full-scale red tea...

AI Technical Summary

Problems solved by technology

These types of cybersecurity assessments come in many forms, from penetration testing to full-scale red teams and even adversary simulation exercises. Cyber ​​offensive testing can provide defenders with an attacker's perspective on network operational weaknesses, with clear benefits for defenders. , but these tests are expensive, time-consuming and limited by the technical level of the testers, making it difficult to use them in practice

Images