Patent ID: 11876829
Assignee: ATTACKIQ, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 19:
20. A method for emulating a known attack on a computer network comprising:
accessing a set of data packets representing behaviors of machines in communication with a second computer network during a malicious attack on the second computer network during a first time period
accessing a set of agents, installed on assets in communication with a target computer network, assigned as actors in a simulation of the malicious attack on the target computer network;
for each data packet in the set of data packets:
assigning a behavior trigger, in a set of behavior triggers, for transmission of the data packet based on a corresponding behavior during the malicious attack on the second computer network;
assigning a recipient agent, in the set of agents, to receive the data packet; and
assigning a source agent, in the set of agents, to transmit the data packet to the recipient agent according to the transmission trigger;

during a second time period succeeding the first time period, initiating transmission of the set of data packets from source agents to recipient agents, in the set of agents, according to the set of transmission triggers to simulate the malicious attack on the target computer network;
accessing a set of network event records generated by a security technology, deployed on the target computer network, during the second time period; and
in response to absence of a network event record, in the set of network event records, indicating the malicious attack:
generating a prompt to reconfigure the security technology to detect the malicious attack at the target computer network.