Method and system simulating a hacking attack on a network

A system for simulating a hacking attack on a Network wherein the Network comprises at least one of a plurality of data processing units (DPUs), a plurality of users and a plurality of communication links to assess vulnerabilities of the Network, the system comprising:

• (a) an automated Social Engineering (SE) architecture for collecting sensitive information that pertains to the plurality of users;
• (b) a communication link framework for identifying vulnerabilities associated with the Network and communication protocols;
• and
• (c) a Multiple Attack Vector engine (MAV) for storing an MAV graph that shows all possible paths by which the Network can be compromised

A computer program product for use with a computer, the computer program product comprising a computer usable medium having a computer readable program code embodied therein for simulating a hacking attack on a Network, wherein the Network comprises at least one of a plurality of data processing units (DPUs), a plurality of users and a plurality of communication links to assess vulnerabilities of the Network, the computer program code comprising:

• (a) program instruction means for receiving one or more scan parameters;
• (b) program instruction means for creating at least one master agent;
• (c) program instruction means for Social Engineering analysis on the Network;
• (d) program instruction means for Link Analysis on the communication among two or more users or the plurality of DPUs;
• (e) program instruction means for creating or updating an Information Model;
• (f) program instruction means for generating a multiple attack vectors graph based on the information collected in the Information Model and the one or more scan parameters;
• (g) program instruction means for executing one or more attacks on the Network to compromise the Network;
• (h) program instruction means for installing at least one agent in the compromised Network;
• (i) program instruction means for performing a multi stage attack by using the at least one slave agent and the at least one master agent by repeating (b) (c), (d), (e), (f), (g) and (h);
• and
• (j) program instruction means for generating a report that contains details about the compromised Network and the vulnerabilities of the compromised Network.

A method for assessing vulnerabilities for a network of a plurality of users, the plurality of users interacting with each other in the Network, the method comprising:

• (a) receiving one or more scan parameters of the Network;
• (b) creating at least one agent to gather information about the plurality of users, wherein the information pertains to critical and non-critical information about the plurality of users and their hierarchical and personal relationships;
• and
• (c) performing automated Social Engineering analysis on the plurality of users to find vulnerabilities associated with the Network;

A method for simulating a hacking attack on a Network, wherein the Network comprises at least one of a plurality of data processing units (DPUs), a plurality of users and a plurality of communication links, to assess vulnerabilities of the Network, the method comprising:

• (a) creating or updating an Information Model, wherein the Information Model comprises the information gathered about the Network;
• (b) generating a Multiple Attack Vectors (MAV) graph based on the information collected in the Information Model and the one or more scan parameters;
• (c) launching one or more attacks based on the MAV graph to compromise the Network, wherein the one or more attacks can be one or more from a group comprising an automated social engineering attack, a communication link attack and a DPU exploit attack;
• (d) generating a report by the system, wherein the report contains details about the compromised Network and the vulnerabilities of the Network.

A method for simulating a hacking attack on a Network, wherein the Network comprises at least one of a plurality of data processing units (DPUs), a plurality of users and a plurality of communication links, to assess vulnerabilities of the Network, the method comprising:

• (a) gathering information about the Network from a plurality of agents, wherein the information relates to the at least one of the plurality of DPUs, a plurality of users, and a plurality of communication links;
• (b) creating or updating an Information Model, wherein the Information Model comprises the information gathered by the plurality of agents;
• (c) launching one or more attacks based on the Information Model to compromise the Network, wherein the one or more attacks can be one or more from a group comprising an automated social engineering attack, a communication link attack and a DPU exploit attack;
• (d) generating a report by the system, wherein the report contains details about the compromised Network and the vulnerabilities of the Network.