The invention discloses a
network security attack and defense
target range system and method based on analogue
simulation, particularly relates to the technical field of
network security protection, and is used for solving the problem of insufficient actual combat detection of a
network security target range. According to the method, the asset atlas and access opponent model
threat knowledge are constructed, a technical unit set and an
attack path atlas are generated, automatic arrangement and execution of
attack plans in a
simulation environment are supported, then configuration of the
observable points, a
time sequence anomaly detection model and a
process variable consistency checking mechanism are fused, the anomaly recognition accuracy is improved, and the method is suitable for being applied to a
simulation environment. And constructing a traceable single timeline by using a unified time reference and a logic
clock label, ensuring the integrity of a detection response causal chain, introducing a differential packet and a double-track strategy bin, realizing gray release and safe
rollback of a rule graph and parameters, enhancing the dynamic
adaptation and evolution ability of a strategy, and improving the accuracy of the detection result. Therefore, the actual combat
verification capability and the response closed-loop effect of the network security
protection system are obviously improved.