Patent ID: 8266320

Claim:
A system for training IT professionals in defense of a computer network, the system comprising: a communications subsystem between a first computer, a second computer, and a third computer; the first computer comprising an enterprise asset subsystem to be defended by the IT professionals, operable to run a plurality of enterprise asset programs, wherein the enterprise asset subsystem is to be defended in a state that is known to not be compromised; the second computer comprising an exploitation asset subsystem, in communication with the enterprise asset subsystem through the communications subsystem, and operable to launch a plurality of exploits against the enterprise asset subsystem; and the third computer comprising a neutral subsystem: in communication with the enterprise asset subsystem through the communications subsystem, and operable to: set up and run at least one exercise scenario for at least one of the plurality of exploits against the enterprise asset subsystem, and assign a score to the IT professionals based on their performance in defending the enterprise asset subsystem.