AUTOMATED EVALUATION OF NETWORK SECURITY

摘要

The invention relates to a method for automatically evaluating the security of a network, in particular a data network, to prevent the spying out of sensitive data. According to said method, the network and its associated connections, together with its services, network elements containing weak points and sensitive data are represented as a network model and the attainability of the sensitive data from the exterior is tested. In the event of the sensitive data being attainable, the attack vectors indicating a potential attack on the sensitive data are given. The method according to the invention permits the autonomous and rapid testing of the influence of newly identified weak points on the security of sensitive data or systems in the network.