SYSTEM AND METHOD FOR COMPARATIVE EVALUATION OF SECURITY TOOLS IN ISOLATED ENVIRONMENTS
A system and method for the secure and private demonstration of cloud-based cyber-security tools. Using an advanced sandboxing design patterns, isolated instances of virtual networks allow a potential client to compare their existing cyber defense tools against a set of cloud-based tools. Capitalizing on non-persistent and secure sandboxes allow the invention to demonstrate fully functional and devastating cyber-attacks while guaranteeing strict privacy and security to both existing customers and potential ones. Additionally, instantiating separate sandboxed observed systems in a single multi-tenant infrastructure provide each customer with the ability to rapidly create actual representations of their enterprise environment offering the most realistic and accurate demonstration and comparison between products.
1 . A computing system comprising a hardware memory, wherein the computer system is configured to execute software instructions stored on nontransitory machine-readable storage media that:
create an isolated testing environment; and
create a testing system within the isolated testing environment, the testing system comprising a second security tool; and
establish a secure tunnel from the isolated testing environment to the first security tool;
wherein the performance of the first and second security tools is evaluated; and
wherein the isolated testing environment is provided with defined computing resources and is prevented from accessing other computing resources.
2 . The system of claim 1 , further comprising a testing system manager comprising a second plurality of programming instructions that, when operating on the processor, cause the computing device to:
operate the testing system;
allow monitoring and modification of the testing system during operation; and
display results from the testing system.
3 . A method for security tool evaluation, comprising the steps of:
operating a first security tool in a production environment;
creating an isolated testing environment;
creating a testing system within the isolated testing environment, the testing system comprising a second security tool;
establishing a secure tunnel from the isolated testing environment to the first security tool;
operating the testing system;
evaluating performance of the first and second security tools;
wherein the isolated testing environment is provided with defined computing resources and is prevented from accessing other computing resources.
4 . The method of claim 3 , further comprising the steps of:
allowing monitoring and modification of the testing system during operation; and
displaying results from the testing system.
5 . The system of claim 1 , wherein multiple concurrent assessments are executed with varying initial conditions and comparative results are generated across the multiple assessments.
6 . The method of claim 3 , wherein multiple parallel assessments are performed with different starting parameters and effectiveness comparisons are made across the parallel assessments.