Methods, systems, and computer program products for modeling a secure production network

A system for modeling a secure production network, comprising:

• a host system;
• and
• a network analyzer and a network isolation application executing on the host system the network analyzer and the network isolation application collectively perform a method, the method comprising:
• generating a test network for emulating production operations;
• capturing and analyzing data traffic occurring over the secure production network and a non-secure production network;
• determining data flow requirements for isolating the secure production network and the non-secure production network from the test network, the data flow requirements determined from results of data traffic capture and analysis;
• and
• generating business logic from the data flow requirements and applying the business logic to a firewall associated with the test network;
• wherein the business logic permits transmission of a subset of secure production data to the test network and prevents receipt of incoming transmissions at the secure production network.

A computer program product for modeling a secure production network, the computer program product including instructions for causing a computer to implement a method, comprising:

• generating a test network for emulating production operations;
• capturing and analyzing data traffic occurring over the secure production network and a non-secure production network;
• determining data flow requirements for isolating the secure production network and the non-secure production network from the test network, the data flow requirements determined from results of data traffic capture and analysis, and
• generating business logic from the data flow requirements and applying the business logic to a firewall associated with the test network;
• wherein the business logic permits transmission of production data to the test network and prevents receipt of incoming transmissions at the secure production network.