Cyber ranges are valuable assets for cybersecurity training and education, advanced prototype development, and certification testing. To address the limitations of individual cyber ranges in terms of their capabilities and capacities to simulate complex realities and multi-sector dependencies, federated cyber ranges are emerging. This work presents the ECHO Federated Cyber Range, a marketplace for cyber range services, that establishes a mechanism by which the independent cyber range capabilities can be interconnected and accessed via a convenient portal for configuration and managemement. Its features and architecture are described in detail, along with the design,validation, and deployment of a training scenario.

No abstract

The complexity of protecting interconnected IT systems grows with the development of new products and applications. Consequently, the capability of Security Operation Centre personnel to keep abreast of new threats is of utmost importance to ensure the security posture of all organisations. In that regard, hands-on exercises on a cyber range reproducing realistic situations can boost the ability of personnel to react appropriately and adequately to intrusion in a production context. Such exercises are known to improve situation awareness. However, the design and delivery of such trainings impose a heavy workload on cyber experts. Relying on an automation system for the execution of attacks considerably lightens the duties of experts and frees some of their time for less repetitive tasks. This article introduces an orchestrator dedicated to red teaming.