Designing a cybersecurity training environment (cyber range) : a scalable approach for real-world defense simulations and practices
Σχεδιασμός περιβάλλοντος εκπαίδευσης κυβερνοασφάλειας (cyber range) : μία κλιμακούμενη προσέγγιση για την ανάπτυξη ρεαλιστικών προσομοιώσεων και πρακτικών άμυνας
View/
Keywords
Cyber-threats ; Cyber-security ; Simulation platforms ; Risk analysis ; Threat forecasting ; Cyber range ; Information security ; Testbed ; Cyber exercises ; TrainingAbstract
As digitalization extends to every industry, the frequency and volume of cyber-attacks are increasing at a rate never experienced before. Ongoing shortage of cybersecurity professionals in combination with constantly evolving threat vectors illustrates the urgent need for state-of-the-art training facilities that emulate true-to-life cyber environments. It is a conventional technique such as hands-on lab practice, prepared hacking exercises, Capture the Flag (CTF) contests, and practice on virtual machines that add up to skill acquisition. These resources rapidly become obsolete as there are fresh threats emerging every day.
Cyber ranges provide a more dynamic and integrated answer by simulating networks, systems, and apps in realistic but controlled settings. They provide scalable cybersecurity training, education, and testing through the power of testing the effects of emerging threats on their updated clone of their operating environment without risking downtime or leaking sensitive data. Such facilities allow the world of cybersecurity to keep pace with the accelerated development of disruptive technologies and the increased interconnection of digital systems.
This thesis proposes both a methodology and an implementation for constructing a scalable cyber range through a virtual infrastructure. The proposed approach includes:
1. The design approach for constructing a scalable, automated and replicable cyber range environment, outlining the underlying infrastructure, technologies, procedures used to model realistic attack scenarios essential services.
2. Details of the practical realization of this environment, focusing on the deployment of the Ludus Cyber Range, system architecture, automation tools, and the configuration of a segmented enterprise-like topology.
3. Execution and evaluation of a Full-Chain Attack Lifecycle through adversary emulation and detection validation, assessing the cyber range’s functionality, reliability, and scalability in simulating realistic cyber incidents.
Through such demonstration of a series of procedures, a methodology is presented in this thesis that makes it easy to develop realistic cyber ranges. This methodology can be applied in organizations of either the private or public sectors to build cyber ranges based on their real infrastructure and keep testing them against threats as well as ensuring the reliability of detection capabilities.
Postgraduate Studies Programme
Κυβερνοασφάλεια και Επιστήμη ΔεδομένωνDepartment
Σχολή Τεχνολογιών Πληροφορικής και Επικοινωνιών. Τμήμα ΠληροφορικήςNumber of pages
115Language
EnglishCollections
Except where otherwise noted, this item's license is described as
Αναφορά Δημιουργού-Μη Εμπορική Χρήση-Όχι Παράγωγα Έργα 3.0 Ελλάδα
Αναφορά Δημιουργού-Μη Εμπορική Χρήση-Όχι Παράγωγα Έργα 3.0 Ελλάδα