Patent ID: 11876829
Assignee: ATTACKIQ, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 17:
18. A method for emulating a known attack on a computer network comprising:
accessing a set of data packets representing data transmitted between machines in communication with a second computer network during a malicious attack on the second computer network during a first time period
accessing a set of agents, installed on assets in communication with a target computer network, assigned as actors in a simulation of the malicious attack on the target computer network;
for each data packet in the set of data packets:
assigning a transmission trigger, in a set of transmission triggers, for transmission of the data packet based on transmission of corresponding data during the malicious attack on the second computer network;
assigning a recipient agent, in the set of agents, to receive the data packet; and
assigning a source agent, in the set of agents, to transmit the data packet to the recipient agent according to the transmission trigger;

accessing a log of network events detected by a set of security technologies, deployed on the target computer network, during transmission of the set of data packets from source agents to recipient agents, in the set of agents, according to the set of transmission triggers that simulates the malicious attack on the target computer network; and
in response to absence of a network event, in the set of network events, indicating the malicious attack:
generating a prompt to reconfigure the set of security technologies to detect the malicious attack at the target computer network.