SYSTEM FOR AUTOMATICALLY IDENTIFYING NECESSARY PREVENTIVE MEASURES AGAINST SECURITY WEAK POINTS

摘要

The invention relates to a method for automatically identifying necessary preventive measures against security weak points in a network, in particular a data network. According to said method, the network and its associated connections, together with its services, network elements containing weak points and sensitive data are represented as a network model and the attainability of the sensitive data from the exterior is tested. In the event of the sensitive data being attainable, the attack vectors indicating a potential attack on the sensitive data are given, the attack vectors are converted into corresponding traffic flow descriptions and the latter are delivered to the network provider as notifications of the type of traffic flows that the attacks use. The method helps network providers to react to potential, probable or newly identified weak points and to configure security systems (e.g. IDS, IPS, firewalls), also permitting security systems of this type to identify attacks more efficiently.