Threat mitigation system and method
A computer-implemented method, computer program product and computing system for: defining a training routine for a specific attack of a computing platform; and generating a simulation of the specific attack by executing the training routine within a controlled test environment.
1. A computer-implemented method, executed on a computing device, comprising:
defining a training routine for a specific attack of a computing platform, including allowing a third party to select a specific training routine from a plurality of available training routines;
determining a quantity of required entities to effectuate the training routine, including analyzing the requirements of the training routine to determine the quantity of required entities required to effectuate the training routine including a number of attacked devices and a number of attacking devices;
generating one or more virtual machines to emulate the one or more required entities; and
generating a simulation of the specific attack by executing the training routine within a controlled test environment.
2. The computer-implemented method of claim 1 wherein generating a simulation of the specific attack by executing the training routine within a controlled test environment includes:
rendering the simulation of the specific attack on the controlled test environment.
3. The computer-implemented method of claim 1 further comprising:
allowing a trainee to view the simulation of the specific attack.
4. The computer-implemented method of claim 3 further comprising:
allowing a trainee to provide a trainee response to the simulation of the specific attack.
5. The computer-implemented method of claim 4 further comprising:
determining the effectiveness of the trainee response.
6. The computer-implemented method of claim 5 wherein determining the effectiveness of the trainee response includes:
assigning a grade to the trainee response.
7. The computer-implemented method of claim 1 wherein the controlled test environment is a virtual machine executed on a computing device.
8. A computer program product residing on a non-transitory computer readable medium having a plurality of instructions stored thereon which, when executed by a processor, cause the processor to perform operations comprising:
defining a training routine for a specific attack of a computing platform, including allowing a third party to select a specific training routine from a plurality of available training routines;
determining a quantity of required entities to effectuate the training routine, including analyzing the requirements of the training routine to determine the quantity of required entities required to effectuate the training routine including a number of attacked devices and a number of attacking devices;
generating one or more virtual machines to emulate the one or more required entities; and
generating a simulation of the specific attack by executing the training routine within a controlled test environment.
9. The computer program product of claim 8 wherein generating a simulation of the specific attack by executing the training routine within a controlled test environment includes:
rendering the simulation of the specific attack on the controlled test environment.
10. The computer program product of claim 8 further comprising:
allowing a trainee to view the simulation of the specific attack.
11. The computer program product of claim 10 further comprising:
allowing a trainee to provide a trainee response to the simulation of the specific attack.
12. The computer program product of claim 11 further comprising:
determining the effectiveness of the trainee response.
13. The computer program product of claim 12 wherein determining the effectiveness of the trainee response includes:
assigning a grade to the trainee response.
14. The computer program product of claim 8 wherein the controlled test environment is a virtual machine executed on a computing device.
15. A computing system including a processor and memory configured to perform operations comprising:
defining a training routine for a specific attack of a computing platform, including allowing a third party to select a specific training routine from a plurality of available training routines;
determining a quantity of required entities to effectuate the training routine, including analyzing the requirements of the training routine to determine the quantity of required entities required to effectuate the training routine including a number of attacked devices and a number of attacking devices;
generating one or more virtual machines to emulate the one or more required entities; and
generating a simulation of the specific attack by executing the training routine within a controlled test environment.
16. The computing system of claim 15 wherein generating a simulation of the specific attack by executing the training routine within a controlled test environment includes:
rendering the simulation of the specific attack on the controlled test environment.
17. The computing system of claim 15 further comprising:
allowing a trainee to view the simulation of the specific attack.
18. The computing system of claim 17 further comprising:
allowing a trainee to provide a trainee response to the simulation of the specific attack.
19. The computing system of claim 18 further comprising:
determining the effectiveness of the trainee response.
20. The computing system of claim 19 wherein determining the effectiveness of the trainee response includes:
assigning a grade to the trainee response.
21. The computing system of claim 15 wherein the controlled test environment is a virtual machine executed on a computing device.