A network security simulation system

Abstract

The invention discloses a network security simulation system, which comprises a network attack simulation subsystem, a risk simulation subsystem and a security defense simulation subsystem. The risk simulation subsystem is used to build the risk simulation environment. The network attack simulation subsystem provides a variety of attack tools and attack parameters to realize the attack on the target object selected by the user in the risk simulation environment, and records the attack process and attack results. The security defense simulation subsystem judges whether it is necessary to adjust the security defense strategy of the target object according to the attack result, and gives a certain security defense strategy for the situation that needs to be adjusted. The invention integrates multiple attack tools, has a security rule knowledge base, can simulate multiple attack scenarios, and can adjust security defense strategies.

Description

technical field [0001] The invention relates to a network security simulation system, which belongs to the field of network security. Background technique [0002] The network security simulation environment construction method automatically constructs and tests the network environment, establishes a security risk simulation basic environment, constructs a corresponding attack model based on the network attack attack input, attack process and external environment analysis, and conducts network attack simulation; researches network system defense models and Methods: Analyze system defense node deployment and defense strength, obtain network performance data and security protection equipment performance data on the basis of automatic / semi-automatic attack simulation, and obtain attack simulation execution information through multiple comparative experiments. [0003] At present, most of the security testing and experimental environments at home and abroad are manually built, w...

AI Technical Summary

Problems solved by technology

[0003] At present, most of the security testing and experimental environments at home and abroad are manually built, which is time-consuming and labor-intensive, and configuration changes are troublesome; the attack drill technology is relatively developed, but the attack tool has a single function and can only carry out certain types of attacks, and there is no integrated attack Tools; attack drills with similar functions. Shooting range products are mainly for competition and teaching, not engineering application products, with limited attack simulation scenarios and lack of data management functions; attack drills are limited to security attacks in specific network scenarios Testing lacks the adjustment function of defensive measures; cannot record and manage offensive and defensive data, cannot establish a security rule knowledge base based on offensive and defensive big data, and cannot form expert knowledge

Images