In the article approaches to the formation of a simulation stand for modeling of violator's actions in the protected information and telecommunication infrastructure are reviewed, the basic requirements to simulation stand are described. The main objectives and a list of threats to information security are identified. An idea of the composition of a simulation stand is presented. Architecture of a simulation stand and a brief description of the elements of its components are given.