| 摘要 |
The invention relates to a method (600) for detecting an attack on a working environment (101) connected to a communication network (115), having the following steps: electronically emulating (601) the working environment (101) by means of a network security element (103) connected to the communication network (115); recording (602) network traffic (202) at the network security element (103); comparing (603) the recorded network traffic (202) with predefined network traffic (204); and triggering (604) a first attack warning signal (110) in the event of a difference between the recorded network traffic (202) and the predefined network traffic (204). |
