Patent ID: 8291473

Claim:
A method for modeling a secure production network, comprising: generating a test network for emulating production operations; capturing and analyzing data traffic occurring over the secure production network and a non-secure production network, the secure production network and non-secure production network separated from each other by a first firewall; determining data flow requirements for isolating the secure production network and the non-secure production network from the test network, the data flow requirements determined from results of data traffic capture and analysis; generating business logic from the data flow requirements and applying the business logic to a second firewall associated with the test network, the business logic identifying traffic that flows between the test network, the secure production network, and the non-secure production network and identifying the data flows requirements from the results of data traffic capture and analysis; and forwarding a subset of secure production data received from the secure production network to the test network via the second firewall associated with the test network according to the business logic; wherein the business logic permits transmission of the subset of secure production data and a subset of non-secure production data to the test network and prevents receipt of incoming transmissions at the secure production network, in response to the generating of the business logic.