Method, product, and system for generating a software representation that embodies network configuration and policy data of a computer network for use in security management

A non-transitory computer readable medium having stored thereon a set of instructions, the set of instructions, when executed by a processor, causing a set of acts comprising:

• identifying network configuration data and network policy data for a computer network;
• generating a software representation of the computer network based on the network configuration data and network policy data by:
• receiving the network configuration data and the network policy data;
• identifying a plurality of relationships between objects or entities represented in the network configuration data or the network policy data;
• and
• generating a plurality of functions based on the plurality of relationships, wherein at least some of the plurality of functions include one or more function calls selectable based on an input, at least one of the entities is identified for protection and associated with a crash statement, and the software representation is configured to be stimulated with inputs to identify a sequence of state-to-state transitions that cause execution of the crash statement.

A computing system comprising:

• a memory storing a set of instructions;
• and
• a processor to execute the set of instructions to perform a set of acts comprising:
• identifying network configuration data and network policy data for a computer network;
• generating a software representation of the computer network based on the network configuration data and network policy data by:
• receiving the network configuration data and the network policy data;
• identifying a plurality of relationships between objects or entities represented in the network configuration data or the network policy data;
• and
• generating a plurality of functions based on the plurality of relationships, wherein at least some of the plurality of functions include one or more function calls selectable based on an input, at least one of the entities is identified for protection and associated with a crash statement, and the software representation is configured to be stimulated with inputs to identify a sequence of state-to-state transitions that cause execution of the crash statement.