Automated cloud cyber range deployments
With the rapid development of technology in every sector (communications, hardware, software, etc.), information systems have become an important infrastructure for the operation of most modern organizations and enterprises. Furthermore, a large number of contemporary, intelligent devices are als...
Αποθηκεύτηκε σε:
| Κύριος συγγραφέας: | |
|---|---|
| Άλλοι συγγραφείς: | |
| Γλώσσα: | English |
| Δημοσίευση: |
2021
|
| Θέματα: | |
| Διαθέσιμο Online: | http://hdl.handle.net/11610/21410 |
| Ετικέτες: |
Προσθήκη ετικέτας
Δεν υπάρχουν, Καταχωρήστε ετικέτα πρώτοι!
|
| Περίληψη: | With the rapid development of technology in every sector (communications, hardware, software, etc.), information systems have become an important infrastructure for the operation of most modern organizations and enterprises.
Furthermore, a large number of contemporary, intelligent devices are also being
connected to the network, adding complexity and additional, possible exploitable, points.
Consequently, information security issues have also become one of the major security threats faced. This new situation challenges for newer, more efficient techniques for assessing current and future needs and protecting an organization’s core infrastructure from external threats.
One form of defence is through training cybersecurity professionals, aiming at the improvement of understanding of the well-known and of newer types of threats, thus improving their technical skills and gain the ability to be protected from them.
A second form of defence is to increase cybersecurity awareness on non-security professionals/specialists and the general public. This can be achieved by executing cybersecurity exercises and by conducting training programs, aiming at increasing technical background knowledge and readiness.
As a result, those educational procedures require specific infrastructure and testbeds for the realistic simulation and assessment of modern organizations.
Cybersecurity Ranges are platforms that take advantage of modern technologies such as virtualization and provide a high fidelity and realistic simulation, experimental, environment, which enables one to test and assess the overall security of the simulated information systems.
First off, we present the research work of Maximilian Frank, et al., “Design Considerations for Cyber Security Testbeds: A Case Study on a Cyber Security Testbed for Education” and we describe the proposed life cycle model, to design and implement cybersecurity testbeds.
Based on the work of the authors, we propose the extension of it, utilizing modern technologies such as Containerization and Cloud Computing, as to benefit from their advantageous characteristics. We, therefore, utilize the proposed life cycle design, in order to create an automated way to deploy educational cyber ranges directly at the cloud and offer the service to the end-user, in a hassle free-manner.
The result of this study is a complete end user software application that can either be customised, enriched and be used for educational reasons or as a baseline for further development for future initiatives towards cybersecurity awareness. |
|---|