Computer network defense

A system for training IT professionals in defense of a computer network, the system comprising:

• a communications subsystem between a first computer, a second computer, and a third computer;
• the first computer comprising an enterprise asset subsystem to be defended by the IT professionals,
• operable to run a plurality of enterprise asset programs,
• wherein the enterprise asset subsystem is to be defended in a state that is known to not be compromised;
• the second computer comprising an exploitation asset subsystem,
• in communication with the enterprise asset subsystem through the communications subsystem, and
• operable to launch a plurality of exploits against the enterprise asset subsystem;
• and
• the third computer comprising a neutral subsystem:
• in communication with the enterprise asset subsystem through the communications subsystem, and
• operable to:
• set up and run at least one exercise scenario for at least one of the plurality of exploits against the enterprise asset subsystem, and
• assign a score to the IT professionals based on their performance in defending the enterprise asset subsystem.