Security assessment system

A security assessment system configured to provide a duplicated environment which duplicates an assessment target system comprising a plurality of physical components, the security assessment system comprising:

• a duplicated environment design circuitry configured to decide a duplication level for each physical component based on constraints specified by a user in order to design the duplicated environment to produce a designed result indicative of a duplicated environment design, the duplication level indicating one of a simulation sub-module, an emulation sub-module, and a physical sub-module which are for reproducing the physical components of the assessment target system, the duplicated environment design circuitry deciding, in accordance with the constraints, which physical component should be assessed by the simulation sub-module, the emulation sub-module, or the physical sub-module, the constraints being requirements of budget, each physical component being associated with a monetary cost, the duplicated environment design circuitry deciding the physical components as the physical sub-module, the emulation sub-module, and the simulation sub-module in ascending order of the monetary cost from cheapest, within the budget;
• and
• a duplicated environment construction circuitry configured to construct the duplicated environment based on the designed result, the duplicated environment comprises components which are duplicated by one of the duplication level.