Intellectual System for Analysis of Corporate Network Protection
Abstract
This paper presents an intelligent system for analyzing the protection of corporate computer networks, integrating models of attack graphs and security indicators to assess vulnerability and resilience levels. The system constructs a general attack graph by modeling potential attacker strategies, incorporating reconnaissance, vulnerability exploitation, and policy-based constraints. Security indicators are computed for both individual and composite network elements, enabling a multi-level qualitative assessment of protection. The architecture comprises modules for network modeling, attack simulation, data and knowledge management, and automated reporting. Testing on a sample corporate network demonstrates the system's capability to identify critical vulnerabilities, assess their impact, and generate targeted recommendations for enhancing network security. Results show the system's applicability for both design-time and operational security evaluation, supporting proactive risk mitigation and informed decision-making in corporate network defense.