Design and Implementation of Multi-Cyber Range for Cyber Training and Testing
Source abstract
Abstract
It is essential to build a practical environment of the training/test site for cyber training and weapon system test evaluation. In a military environment, cyber training sites should be continuously developed according to the characteristics of the military. Weapons with cyber security capabilities should be deployed through cyber security certification. Recently, each military has been building its own cyber range that simulates its battlefield environment. However, since the actual battlefield is an integrated operation environment, the cyber range built does not reflect the integrated battlefield environment that is interconnected. This paper proposes a configuration plan and operation function to construct a multi-cyber range reflecting the characteristics of each military to overcome this situation. In order to test the multi-cyber range, which has scenario authoring and operation functions, and can faithfully reflect reality, the impact of DDoS attacks is tested. It is a key to real-world mission-based test evaluation to ensure interoperability between military systems. As a result of the experiment, it was concluded that if a DDoS attack occurs due to the infiltration of malicious code into the military network, it may have a serious impact on securing message interoperability between systems in the military network. Cyber range construction technology is being developed not only in the military, but also in school education and businesses. The proposed technology can also be applied to the construction of cyber ranges in industries where cyber-physical systems are emphasized. In addition, it is a field that is continuously developing with the development of technology, such as being applied as an experimental site for learning machine learning systems.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Information and Cyber Security · Network Security and Intrusion Detection · Smart Grid Security and Resilience
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Computer Engineering, Sejong University, Seoul 05006, Republic of Korea
R.O.K Agency for Defense Development, Seoul 05771, Republic of Korea
R.O.K Hanwha Systems, Seongnam 13524, Republic of Korea
Department of Convergence Engineering for Intelligent Drones, Sejong University, Seoul 05006, Republic of Korea
Funding
National Research Foundation of Korea
References (20)
Show source-provided references
1. Bloom, J. (2011). The Financial Implication of Technical Debt, CAST Software Ltd.
2. Damodaran, S.K., and Smith, K. (2015). CRIS Cyber Range Lexicon, MIT Lincoln Laboratory. Version 1.0 (Report 59-0001).
3. Hutchison, S.J. (2013). Shift Left! Test Earlier in the Life Cycle, Defense Acquisition University.
4. Oikonomou, N., Mengidis, N., Spanopoulos-Karalexidis, M., Voulgaridis, A., Merialdo, M., Raisr, L., Hanson, K., Vallee, P.L., Tsikrika, T., and Vrochidis, S. (2021, January 26–28). ECHO Federated Cyber Range: Towards Next-Generation Scalable Cyber Ranges. Proceedings of the 2021 IEEE International Conference on Cyber Security and Resilience (CSR), Rhodes, Greece.10.1109/CSR51186.2021.9527985 ↗
5. Urias, V.E., Stout, W.M.S., Van Leeuwen, B., and Lin, H. (2018, January 22–25). Cyber Range Infrastructure Limitations and Needs of Tomorrow: A Position Paper. Proceedings of the 2018 International Carnahan Conference on Security Technology (ICCST), Montreal, QC, Canada.10.1109/CCST.2018.8585460 ↗
6. Pridmore, L., Lardieri, P., and Hollister, R. (2010, January 13–16). National Cyber Range (NCR) Automated Test Tools: Implications and Application to Network-Centric Support Tools. Proceedings of the 2010 IEEE AUTOTESTCON, IEEE, Orlando, FL, USA.10.1109/AUTEST.2010.5613581 ↗
7. Ferguson, B., Tall, A., and Olsen, D. (2014, January 6–8). National Cyber Range Overview. Proceedings of the 2014 IEEE Military Communications Conference, Baltimore, MD, USA.10.1109/MILCOM.2014.27 ↗
8. Jacq, O., Salazar, G.P., Parasuraman, K., Kuusijarvi, J., Gkaniatsou, A., Latsak, E., and Amditis, A. (2021, January 26–28). The Cyber-MAR Project: First Results and Perspectives on the Use of Hybrid Cyber Ranges for Port Cyber Risk Assessment. Proceedings of the 2021 IEEE International Conference on Cyber Security and Resilience (CSR), Rhodes, Greece.10.1109/CSR51186.2021.9527968 ↗
9. Peratikou, A., Louca, C., Shiaeles, S., and Stavrou, S. (2021). On Federated Cyber Range Network Interconnection. Lecture Notes in Networks and Systems, Proceedings of the 12th International Networking Conference. INC 2020. Plymouth, UK, 5 January, 2020, Springer.10.1007/978-3-030-64758-2_9 ↗
10. Cruz, T., and Simões, P. (2021). Down the Rabbit Hole: Fostering Active Learning through Guided Exploration of a SCADA Cyber Range. Appl. Sci., 11.10.3390/app11209509 ↗
11. Teixeira, M.A., Salman, T., Zolanvari, M., Jain, R., Meskin, N., and Samaka, M. (2018). SCADA System Testbed for Cybersecurity Research Using Machine Learning Approach. Future Internet, 10.10.3390/fi10080076 ↗
12. A cybersecurity detection framework for supervisory control and data acquisition systems10.1109/TII.2016.2599841 ↗
13. Mathur, A., and Tippenhauer, N. (2016, January 11). SWaT: Secure Water Treatment Testbed for Research and Training in the Design of Industrial Control Systems. Proceedings of the IEEE Computer Society International Conference on Computers, Software & Applications, Vienna, Austria.10.1109/CySWater.2016.7469060 ↗
14. Smyrlis, M., Somarakis, I., Spanoudakis, G., Hatzivasilis, G., and Ioannidis, S. (2021). CYRA: A Model-Driven CYber Range Assurance Platform. Appl. Sci., 11.10.3390/app11115165 ↗
15. Ukwandu, E., Farah, M.A.B., Hindy, H., Brosset, D., Kavallieros, D., Atkinson, R., Tachtatzis, C., Bures, M., Andonovic, I., and Bellekens, X. (2020). A Review of Cyber-Ranges and Test-Beds: Current and Future Trends. Sensors, 20.10.3390/s20247148 ↗
16. Chouliaras, N., Kittes, G., Kantzavelou, I., Maglaras, L., Pantziou, G., and Ferrag, M.A. (2021). Cyber Ranges and TestBeds for Education, Training, and Research. Appl. Sci., 11.10.3390/app11041809 ↗
17. Swing: Realistic and Responsive Network Traffic Generation, IEEE/ACM10.1109/TNET.2009.2020830 ↗
18. Bieniasz, J., and Szczypiorski, K. (2021). Dataset Generation for Development of Multi-Node Cyber Threat Detection Systems. Electronics, 10.10.3390/electronics10212711 ↗
19. A tool for the generation of realistic network workload for emerging networking scenarios10.1016/j.comnet.2012.02.019 ↗
20. Heinbockel, W., Noel, S., and Curbo, J. (2016). Mission Dependency Modeling for Cyber Situational Awareness. NATO IST-148 Symposium on Cyber Defence Situation Awareness, NATO.