System for managing information security attack and defense planning

A system for managing information security attack and defense planning, comprising:

• a monitoring and control server communicatively connected to a targeted website provided by a targeted institution;
• a hacker end communicatively connected to the monitoring and control server and conducting a real-world penetration test to hack the targeted website through the monitoring and control server;
• an observer end communicatively connected to the hacker end;
• and
• a manager end communicatively connected to the observer end and providing an analysis platform and the monitoring and control server, wherein the analysis platform is communicatively connected to the observer end and the monitoring and control server;
• wherein the targeted website and the hacker end do not directly communicatively connect with each other, but rather indirectly communicatively connect with each other through the monitoring and control server;
• wherein the hacker end and the observer end generate a first independent report and a second independent report, respectively, according to logged information during the real-world penetration test and transmit the first independent report and the second independent report to the targeted institution, the targeted institution generates a piece of recorded information and forwards the first independent report, the second independent report, and the piece of recorded information to the analysis platform provided by the manager end for the manager end to generate a summary report including flaws and vulnerabilities in information security and transmit the summary report to the targeted institution.