Simulation modeling method and device for network attack and defense process and network turn war chess

Abstract

The invention relates to a simulation modeling method and device for a network attack and defense process and network turn war chess. The method comprises the following steps: acquiring a logical relationship between objects in a network attack and defense process, and object attributes and data attributes of the objects, wherein the objects comprise attackers, defenders, attack and defense steps, attack and defense modes, attack effects and resource consumption; carrying out network attack and defense combat simulation based on an attack path of a Lokhide-Martin killer chain model and an ATTCK framework by adopting a network round system game mode, and taking a knowledge graph as a data structure organization mode, so that game participants, namely, attackers, defenders and audiences can learn the network attack paradigm and understand the application stage and the generation effect of the attack defense technical means, finally the purpose of educational training is achieved, the network attack and defense safety awareness and interest of participants are improved, and technical support is provided for attack and defense technique and tactical effect evaluation.

Description

technical field [0001] The present application relates to the technical field of network information security and simulation modeling, in particular to a simulation modeling method and device for network attack and defense process, and a network turn-based wargame. Background technique [0002] As an emerging combat domain, cyberspace is not only a hub space connecting natural spaces such as land, sea, air, and sky, but also an information-carrying space for human production and life such as economy, finance, transportation, and social interaction. It has become a development trend to make security decisions, make network security decisions through network attack and defense process simulation systems, deduce the process of cyberspace confrontation, and train personnel's security awareness and technical and tactical levels. [0003] Existing network simulations, network exercises, or network threat modeling are large in size, high in cost, and poor in repeatability, making i...

AI Technical Summary

Problems solved by technology

[0003] Existing network simulations, network exercises, or network threat modeling are large in size, high in cost, and poor in repeatability, making it difficult for operators to conduct a large number of repeatable experiments to improve operational skills, verify the effectiveness of technical and tactical offensive and defensive effects, and Requirements for protection effectiveness and quantitative evaluation

Images