Patent ID: 8671224

Claim:
A method for training one or more users of a computer network to defend the computer network, the method comprising: establishing communications between at least a first computer including an enterprise asset subsystem, a second computer including an exploitation asset subsystem, and a third computer including a neutral subsystem; executing by the enterprise asset subsystem a plurality of virtual enterprise asset programs identical to computer network enterprise asset programs; launching by a first subset of the one or more users via the exploitation subsystem of the at least a second computer one or more exploits against at least one of the plurality of virtual enterprise asset programs; and monitoring via at least a first computer by the second subset of the one or more users the at least one of a plurality of virtual enterprise asset programs to maintain execution thereof, identifying one or more exploits thereof and attempting to address one or more identified exploits; tracking by the neutral subsystem the launching of the one or more exploits and the monitoring of the at least one of a plurality of virtual enterprise asset programs, including the identification of one or more exploits and the addressing of the one or more identified exploits; and scoring by the neutral subsystem the first and second subsets of users based on results of the tracking thereby and providing access to scoring results to facilitate the training of one or more users of a computer network to defend the computer network.