Patent ID: 8356353
Filing Date: 2013-01-15
Classification: H04L

Abstract:
1. A method of providing computer network attack simulation on a computer, comprising the steps of: receiving a network configuration, a network setup description, and a penetration testing framework with a local agent installed in the penetration testing framework; simulating the network based on the received network configuration, wherein the simulated network contains at least one of the group consisting of a simulated computer, a simulated machine, and a simulated network device; receiving a remote agent running in one simulated computer of the simulated network and connected to the penetration testing framework through the local agent; receiving a simulated exploit for compromising the at least one simulated computer, simulated machine, or simulated network device; querying an exploit database with a property of said simulated exploit; receiving an exploit outcome probability from said exploit database in response to said querying; determining an outcome of the simulated exploit for compromising the at least one simulated computer, simulated machine, or simulated network device based on said exploit outcome probability; and when the outcome of the simulated exploit is compromising the simulated computer, simulated machine, or simulated network device, virtually installing a remote agent on the at least one simulated computer, simulated machine, or simulated network device, wherein the remote agent allows a user to execute arbitrary operating system calls on the at least one simulated computer, simulated machine, or simulated network device from the local agent.