J 2021

Optimization of Cyber Defense Exercises Using Balanced Software Development Methodology

OŠLEJŠEK, Radek and Tomáš PITNER

Basic information

Original name

Optimization of Cyber Defense Exercises Using Balanced Software Development Methodology

Authors

OŠLEJŠEK, Radek (203 Czech Republic, guarantor, belonging to the institution) and Tomáš PITNER (203 Czech Republic, belonging to the institution)

Edition

International Journal of Information Technologies and Systems Approach, IGI Global, 2021, 1935-570X

Other information

Language

English

Type of outcome

Článek v odborném periodiku

Field of Study

10201 Computer sciences, information science, bioinformatics

Country of publisher

United States of America

Confidentiality degree

není předmětem státního či obchodního tajemství

RIV identification code

RIV/00216224:14330/21:00120611

Organization unit

Faculty of Informatics

UT WoS

000644820000009

Keywords in English

Cybersecurity; Training; Learning; Phase; Discipline; Agile; Disciplined; Cyber Range; Development Method; CDX; SPEM

Tags

International impact, Reviewed
Změněno: 7/7/2021 12:54, doc. RNDr. Radek Ošlejšek, Ph.D.

Abstract

V originále

Cyber defense exercises (CDXs) represent an effective way to train cybersecurity experts. However, their development is lengthy and expensive. The reason lies in current practice where the CDX life cycle is not sufficiently mapped and formalized, and then exercises are developed ad-hoc. However, the CDX development shares many aspects with software development, especially with ERP systems. This paper presents a generic CDX development method that has been derived from existing CDX life cycles using the SPEM standard meta-model. The analysis of the method revealed bottlenecks in the CDX development process. Observations made from the analysis and discussed in the paper indicate that the organization of CDXs can be significantly optimized by applying a balanced mixed approach with agile preparation and plan-driven disciplined evaluation.

Links

EF16_019/0000822, research and development project
Name: Centrum excelence pro kyberkriminalitu, kyberbezpečnost a ochranu kritických informačních infrastruktur

Files attached