Multi-view network attack and defense simulation system

Abstract

The invention relates to a multi-view network attack and defense simulation system. The system comprises: a network information environment module used for configuring hardware information and software information and establishing a network information system model through the hardware information and the software information; a background flow module which is used for simulating behavior information of a user in the network environment to obtain a background flow model; an attack and defense module which is used for establishing a network threat model according to the network threat behaviorand establishing a network defense model according to the network defense behavior; a simulation module which is used for constructing a network attack and defense adaptive model according to the network information system model, the background flow model, the network threat model and the network defense model, acquiring preset network attack and defense simulation data, inputting the network attack and defense simulation data into the network attack and defense adaptive model, and outputting network attack and defense element data. By adopting the method, network attack and defense deductioncan be easily realized.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to a multi-view network attack and defense simulation system. Background technique [0002] Network attack and defense modeling can be applied to many fields such as network defense gap cognition, system security engineering, and network attack and defense simulation. [0003] To best understand the security of networked information systems, network defenders often use offensive testing techniques and assessments. These types of cybersecurity assessments come in many forms, from penetration testing to full-scale red teams and even adversary simulation exercises. Cyber ​​offensive testing can provide defenders with an attacker's perspective on network operational weaknesses, with clear benefits for defenders. , but these tests are becoming more and more expensive, time-consuming and limited by the tester's skill level, practical use may be difficult. Simulation e...

AI Technical Summary

Problems solved by technology

If only from the perspective of attack, static description, it is difficult to understand the whole picture of the network attack and defense process, and the established model is also difficult to directly conduct network attack and defense deduction

Images