Design and Implementation of Multi-Cyber Range for Cyber Training and Testing

Abstract

It is essential to build a practical environment of the training/test site for cyber training and weapon system test evaluation. In a military environment, cyber training sites should be continuously developed according to the characteristics of the military. Weapons with cyber security capabilities should be deployed through cyber security certification. Recently, each military has been building its own cyber range that simulates its battlefield environment. However, since the actual battlefield is an integrated operation environment, the cyber range built does not reflect the integrated battlefield environment that is interconnected. This paper proposes a configuration plan and operation function to construct a multi-cyber range reflecting the characteristics of each military to overcome this situation. In order to test the multi-cyber range, which has scenario authoring and operation functions, and can faithfully reflect reality, the impact of DDoS attacks is tested. It is a key to real-world mission-based test evaluation to ensure interoperability between military systems. As a result of the experiment, it was concluded that if a DDoS attack occurs due to the infiltration of malicious code into the military network, it may have a serious impact on securing message interoperability between systems in the military network. Cyber range construction technology is being developed not only in the military, but also in school education and businesses. The proposed technology can also be applied to the construction of cyber ranges in industries where cyber-physical systems are emphasized. In addition, it is a field that is continuously developing with the development of technology, such as being applied as an experimental site for learning machine learning systems.

A Study on the Multi-Cyber Range Application of Mission-Based Cybersecurity Testing and Evaluation in Association with the Risk Management Framework

“…In this chapter, a virtual defense system, "Mission Support System" is defined, and a simulation experiment is conducted to apply cybersecurity T&E associated with the RMF to the Multi-Cyber Range. The simulation in this paper replaces the Multi-Cyber Range and uses the same cyber attack simulation system as the simulation method conducted in [2]. The mission support system, a virtual defense system, is defined to be "a system that requests operational support effectively from lower echelons to upper echelons using enemy information and target information" to identify missions, operational tasks, functions, and assets.…”

“…Furthermore, ref. [2] introduced the concept of the Multi-Cyber Range, which amalgamates cyber ranges operated by each branch of the military to establish a comprehensive and immersive cyber training facility. This model aims to heighten fidelity and realism, facilitating three-dimensional joint training and interoperability assessments.…”

“…These experiments are conducted based on a resource-depletion type of malicious code attack scenario. The role of the Multi-Cyber Range in this paper is to conduct simulated experiments using the same cyber attack simulation system utilized in [2].…”

An Investigation of Learning Model Technologies for Network Traffic Classification Design in Cyber Security Exercises

“…In such cyber training, classifying normal network traffic is a critical factor, and it is vital to generate and reproduce normal traffic to build a cyber training environment. The trend is shifting towards analyzing existing cyber threat cases and replicating network traffic to reproduce them in cyberspace [22]. Vishwanath et al designed a method for stochastic generation of network traffic, duplication of actual network traffic, and delivering commands to test network applications [23], while Bieniasz et al proposed an approach for creating datasets for researching cyber threats on multi-node systems [24].…”

Improved Cyber Defense Modeling Framework for Modeling and Simulating the Lifecycle of Cyber Defense Activities

“…Unlike cyberattack simulation technologies, cyber defense simulation technologies have not been extensively researched [13], [14]. Most organizations that implement cybersecurity M&S have robust cyberattack response teams and processes and follow governmentmandated cyber incident response guidelines [6], [12], [15], [16]. However, current cyber defense modeling studies have not experimentally verified such approaches.…”