Lessons Learned From Complex Hands-on Defence Exercises in a
Cyber Range

D 2017

Lessons Learned From Complex Hands-on Defence Exercises in a Cyber Range

VYKOPAL, Jan, Martin VIZVÁRY, Radek OŠLEJŠEK, Pavel ČELEDA, Daniel TOVARŇÁK et. al.

Základní údaje

Originální název

Lessons Learned From Complex Hands-on Defence Exercises in a Cyber Range

Název česky

Zkušenosti z přípravy komplexních praktických obranných cvičení v kybernetických polygonech

Autoři

VYKOPAL, Jan (203 Česká republika, garant, domácí), Martin VIZVÁRY (703 Slovensko, domácí), Radek OŠLEJŠEK (203 Česká republika, domácí), Pavel ČELEDA (203 Česká republika, domácí) a Daniel TOVARŇÁK (203 Česká republika, domácí)

Vydání

Indianapolis, IN, USA, 2017 IEEE Frontiers in Education Conference, od s. 1-8, 8 s. 2017

Nakladatel

IEEE

Další údaje

Jazyk

angličtina

Typ výsledku

Stať ve sborníku

Obor

10201 Computer sciences, information science, bioinformatics

Stát vydavatele

Spojené státy

Utajení

není předmětem státního či obchodního tajemství

Forma vydání

elektronická verze "online"

Odkazy

URL

Kód RIV

RIV/00216224:14610/17:00094479

Organizační jednotka

Ústav výpočetní techniky

ISBN

978-1-5090-5919-5

ISSN

DOI

http://dx.doi.org/10.1109/FIE.2017.8190713

UT WoS

000426974900279

Klíčová slova anglicky

hands-on exercise; cybersecurity; cyber range; exercise design;

Štítky

core_B, firank_B, rivok

Příznaky

Mezinárodní význam, Recenzováno

Změněno: 16. 4. 2018 15:29, Mgr. Alena Mokrá

Anotace

V originále

We need more skilled cybersecurity professionals because the number of cyber threats and ingenuity of attackers is ever growing. Knowledge and skills required for cyber defence can be developed and exercised by lectures and lab sessions, or by active learning, which is seen as a promising and attractive alternative. In this paper, we present experience gained from the preparation and execution of cyber defence exercises involving various participants in a cyber range. The exercises follow a Red vs. Blue team format, in which the Red team conducts malicious activities against emulated networks and systems that have to be defended by Blue teams of learners. Although this exercise format is popular and used worldwide by numerous organizers in practice, it has been sparsely researched. We contribute to the topic by describing the general exercise life cycle, covering the exercise's development, dry run, execution, evaluation, and repetition. Each phase brings several challenges that exercise organizers have to deal with. We present lessons learned that can help organizers to prepare, run and repeat successful events systematically, with lower effort and costs, and avoid a trial-and-error approach that is often used.

Návaznosti

VI20162019014, projekt VaV

Název: Simulace, detekce a potlačení kybernetických hrozeb ohrožujících kritickou infrastrukturu (Akronym: KYPO II)

Investor: Ministerstvo vnitra ČR, Simulace, detekce a potlačení kybernetických hrozeb ohrožujících kritickou infrastrukturu

Přiložené soubory

2017-FIE-lessons-learned-exercises-cyber-range-paper.pdf

Vyhledat podobné dokumenty

2017-FIE-lessons-learned-exercises-cyber-range-presentation.pdf

Vyhledat podobné dokumenty

Citovat

VYKOPAL, Jan, Martin VIZVÁRY, Radek OŠLEJŠEK, Pavel ČELEDA a Daniel TOVARŇÁK. Lessons Learned From Complex Hands-on Defence Exercises in a Cyber Range. Online. In 2017 IEEE Frontiers in Education Conference. Indianapolis, IN, USA: IEEE, 2017, s. 1-8. ISBN 978-1-5090-5919-5. Dostupné z: https://dx.doi.org/10.1109/FIE.2017.8190713.

@inproceedings{1391675,
   author = {Vykopal, Jan and Vizváry, Martin and Ošlejšek, Radek and Čeleda, Pavel and Tovarňák, Daniel},
   address = {Indianapolis, IN, USA},
   booktitle = {2017 IEEE Frontiers in Education Conference},
   doi = {http://dx.doi.org/10.1109/FIE.2017.8190713},
   keywords = {hands-on exercise; cybersecurity; cyber range; exercise design;},
   howpublished = {elektronická verze "online"},
   language = {eng},
   location = {Indianapolis, IN, USA},
   isbn = {978-1-5090-5919-5},
   pages = {1-8},
   publisher = {IEEE},
   title = {Lessons Learned From Complex Hands-on Defence Exercises in a Cyber Range},
   url = {https://is.muni.cz/repo/1391675/2017-FIE-lessons-learned-exercises-cyber-range-paper.pdf},
   year = {2017}
}

TY  - JOUR
ID  - 1391675
AU  - Vykopal, Jan - Vizváry, Martin - Ošlejšek, Radek - Čeleda, Pavel - Tovarňák, Daniel
PY  - 2017
TI  - Lessons Learned From Complex Hands-on Defence Exercises in a Cyber Range
PB  - IEEE
CY  - Indianapolis, IN, USA
SN  - 9781509059195
KW  - hands-on exercise
KW  - cybersecurity
KW  - cyber range
KW  - exercise design;
UR  - https://is.muni.cz/repo/1391675/2017-FIE-lessons-learned-exercises-cyber-range-paper.pdf
L2  - https://is.muni.cz/repo/1391675/2017-FIE-lessons-learned-exercises-cyber-range-paper.pdf
N2  - We need more skilled cybersecurity professionals because the number of cyber threats and ingenuity of attackers is ever growing. Knowledge and skills required for cyber defence can be developed and exercised by lectures and lab sessions, or by active learning, which is seen as a promising and attractive alternative. In this paper, we present experience gained from the preparation and execution of cyber defence exercises involving various participants in a cyber range. The exercises follow a Red vs. Blue team format, in which the Red team conducts malicious activities against emulated networks and systems that have to be defended by Blue teams of learners. Although this exercise format is popular and used worldwide by numerous organizers in practice, it has been sparsely researched. We contribute to the topic by describing the general exercise life cycle, covering the exercise's development, dry run, execution, evaluation, and repetition. Each phase brings several challenges that exercise organizers have to deal with. We present lessons learned that can help organizers to prepare, run and repeat successful events systematically, with lower effort and costs, and avoid a trial-and-error approach that is often used.
ER  -

VYKOPAL, Jan, Martin VIZVÁRY, Radek OŠLEJŠEK, Pavel ČELEDA a Daniel TOVARŇÁK. Lessons Learned From Complex Hands-on Defence Exercises in a Cyber Range. Online. In \textit{2017 IEEE Frontiers in Education Conference}. Indianapolis, IN, USA: IEEE, 2017, s.~1-8. ISBN~978-1-5090-5919-5. Dostupné z: https://dx.doi.org/10.1109/FIE.2017.8190713.

Podrobný výpis o publikaci