The major challenge of EDM is the efficient establishment of tables of network configuration variation strategies and threat types, which involves the decomposition of representative network attacks, the categorization of the atomic attacks, and research on effective network configuration variation strategies for each kind of atomic attack.