A system for testing security of a device under test, the system comprising: a network simulation unit comprising at least two Internet Protocol interfaces (13, 14), wherein a first Internet Protocol interface is configured to communicate with a database via Internet and a second Internet Protocol interface is configured to communicate with the device under test, an Internet Protocol data monitoring unit configured to monitor Internet Protocol data, and a non Internet Protocol data monitoring unit configured to monitor non Internet Protocol data, wherein the Internet Protocol data monitoring unit and the non Internet Protocol data monitoring unit are further configured to monitor communication with respect to the network simulation unit in parallel and simultaneously, wherein the system further comprises an analyzing unit configured to analyze communication security on the basis of results of Internet Protocol and non Internet Protocol monitoring, wherein the system is configured to analyze the configuration of the communication channel between the second Internet Protocol interface and the device under test for security weaknesses, and wherein the network simulation unit is further configured in that during establishment of a connection to the device under test to actively attempt negotiating a connection with non-existent or insufficient encryption. a network simulation unit comprising at least two Internet Protocol interfaces (13, 14), wherein a first Internet Protocol interface is configured to communicate with a database via Internet and a second Internet Protocol interface is configured to communicate with the device under test, an Internet Protocol data monitoring unit configured to monitor Internet Protocol data, and a non Internet Protocol data monitoring unit configured to monitor non Internet Protocol data, wherein the Internet Protocol data monitoring unit and the non Internet Protocol data monitoring unit are further configured to monitor communication with respect to the network simulation unit in parallel and simultaneously, wherein the system further comprises an analyzing unit configured to analyze communication security on the basis of results of Internet Protocol and non Internet Protocol monitoring, wherein the system is configured to analyze the configuration of the communication channel between the second Internet Protocol interface and the device under test for security weaknesses, and wherein the network simulation unit is further configured in that during establishment of a connection to the device under test to actively attempt negotiating a connection with non-existent or insufficient encryption. wherein the Internet Protocol data monitoring unit and the non Internet Protocol data monitoring unit are further configured to monitor communication with respect to the network simulation unit in parallel and simultaneously, wherein the system further comprises an analyzing unit configured to analyze communication security on the basis of results of Internet Protocol and non Internet Protocol monitoring, wherein the system is configured to analyze the configuration of the communication channel between the second Internet Protocol interface and the device under test for security weaknesses, and wherein the network simulation unit is further configured in that during establishment of a connection to the device under test to actively attempt negotiating a connection with non-existent or insufficient encryption.