SYSTEM AND METHOD FOR SIMULATING COMPUTER NETWORK ATTACKS

• US 20090007270A1
• Filed: 06/26/2008
• Published: 01/01/2009
• Est. Priority Date: 06/26/2007
• Status: Active Grant

• Current Assignee: Ecrime Management Strategies, Inc.
• Original Assignee: Core SDI, Inc.
• Inventors: Miranda, Fernando Carlos, Orlicki, Jose Ignacio, Sarraute Yamada, Carlos Emilio, Futoransky, Ariel
• Granted Patent: US 8,356,353 B2
• Time in Patent Office: Days
• US Class Current: 726/25
• CPC Class Codes: H04L 41/048 mobile agents
• CPC Class Codes: H04L 43/50 Testing arrangements
• CPC Class Codes: H04L 63/1433 Vulnerability analysis

Abstract

The present invention provides a system and method for providing computer network attack simulation. The method includes the steps of: receiving a network configuration and setup description; simulating the network configuration based on the received network configuration; receiving at least one confirmed vulnerability of at least one computer, machine, or network device in the simulated network; receiving a method for compromising the confirmed vulnerability of the at least one computer, machine, or network device; and virtually installing a network agent on the at least one computer, machine, or network device, wherein the network agent allows a penetration tester to execute arbitrary operating system calls on the at least one computer, machine, or network device.

Claims

1. A method of providing computer network attack simulation, comprising the steps of:

receiving a network configuration and a network setup description;

simulating the network configuration based on the received network configuration;

receiving at least one confirmed vulnerability of at least one computer, machine, or network device in the simulated network;

receiving a method for compromising the confirmed vulnerability of the at least one computer, machine, or network device; and

virtually installing a network agent on the at least one computer, machine, or network device, wherein the network agent allows a penetration tester to execute arbitrary operating system calls on the at least one computer, machine, or network device.

2. The method of claim 1, further comprising the step of executing the arbitrary operating system calls on the computer to analyze risk to which the network may be exposed.

3. A method of providing computer network attack simulation, comprising the steps of:

receiving a network configuration and a setup description, wherein the network configuration contains at least one of the group consisting of a computer, a machine, and a network device, to be simulated;

simulating the network configuration based on the received network configuration;

receiving at least one virtual process or service to be run in one of the simulated computer, machine, or network device; and

receiving a method for performing information gathering within the simulated network, the information gathering method comprising an arbitrary sequence of system calls.

4. The method of claim 3, further comprising the step of providing answers to the system calls, thereby simulating the network.