Network Security Management System based the Simulation Technique

摘要

PURPOSE: A simulation-based network security management system is provided to perform simulations for various cyber attack scenarios based on monitoring information on collected network components by interworking with various security tools, thereby analyzing network vulnerability and generating defense strategies. CONSTITUTION: A security agent(10) collects monitoring information on network states of each network component, and applies established security strategies to the corresponding network components. A simulator(20) generates a simulation model according to the collected monitoring information, and performs simulations for cyber attack in the simulation model. An analyzer(30) quantitatively analyzes vulnerability of the network components according to simulation results. A planner(40) applies defense strategies collected by analyzed results to the simulation model through the simulator(20), evaluates the applied defense strategies, and establishes an optimal defense strategy according to a security policy of a manager.