CYRA: A Model-Driven CYber Range Assurance Platform

Abstract

Digital technologies are facilitating our daily activities, and thus leading to the social transformation with the upcoming 5G communications and the Internet of Things. However, mainstream and sophisticated attacks are remaining a threat, both for individuals and organisations. Cyber Range emerges as a promising solution to effectively train people in cybersecurity aspects. A Training Programme is considered adequate only if it can adapt to the scope of the attacks they cover and if the trainees apply the learning material to the operational system. Therefore, this study introduces the model-driven CYber Range Assurance platform (CYRA). The solution allows a trainee to be trained for known and new cyber-attacks by adapting to the continuously evolving threat landscape and examines if the trainees transfer the acquired knowledge to the working environment. Furthermore, this paper presents a use case on an operational backend ICT system, showing how the CYRA platform was utilised to increase the security posture of the organisation.

Cybersecurity training and healthcare: the AERAS approach

“…Recent works [10] describes platforms to allow trainees to be trained for known and new cyber-attacks, by adapting to the continuously evolving threat landscape and examining if the trainees transfer the acquired knowledge to the working environment. In the same way, commercial products like Cyberbit Cyber Range 1 supplies a training/simulation platform for the instantiation and management of hyper-realistic training centres, while the AIT Cyber Range 2 , provided by the Austrian Institute of Technology, offers a virtual environment of flexible simulation of critical IT systems.…”

Developing a Cybersecurity Training Environment through the Integration of OpenAI and AWS

“…The environment is regularly updated with new scenarios, reflecting the latest trends and threats in cybersecurity. This ensures that training remains relevant and challenging [20].…”

Incident Handling for Healthcare Organizations and Supply-Chains

“…At the backend of the system, Assurance Platform is deployed [31], [32], which collects information by the local Metadon agents (aka Particular Agents which have been deployed in the HCII) and perform AI processes, reasoning about the whole healthcare setting for an organization. The Assurance Platform is also utilizing the ELK stack, as well as customized Event Captors, in order to gather data and evidence.…”