Lessons learned from complex hands-on defence exercises in a cyber range

Vykopal, Jan; Vizváry, Martin; Ošlejšek, Radek; Čeleda, Pavel; Tovarňák, Daniel

doi:10.1109/fie.2017.8190713

Cited by 63 publications

(45 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…There might be an additional debriefing later when SUPERVISORS manually process the data. However, the analysis is laborious, and the delayed presentation of findings might reduce the impact on TRAINEES [32]. They should receive a view of their behavior during the training session as well as comparison with other TRAINEES.…”

Section: Cooperation Patterns (V 5b )mentioning

confidence: 99%

Conceptual Model of Visual Analytics for Hands-on Cybersecurity Training

Ošlejšek

Rusňák

Burska

et al. 2021

IEEE Trans. Visual. Comput. Graphics

Self Cite

View full text Add to dashboard Cite

Hands-on training is an effective way to practice theoretical cybersecurity concepts and increase participants' skills. In this paper, we discuss the application of visual analytics principles to the design, execution, and evaluation of training sessions. We propose a conceptual model employing visual analytics that supports the sensemaking activities of users involved in various phases of the training life cycle. The model emerged from our long-term experience in designing and organizing diverse hands-on cybersecurity training sessions. It provides a classification of visualizations and can be used as a framework for developing novel visualization tools supporting phases of the training life-cycle. We demonstrate the model application on examples covering two types of cybersecurity training programs.

show abstract

Section: Cooperation Patterns (V 5b )mentioning

confidence: 99%

Conceptual Model of Visual Analytics for Hands-on Cybersecurity Training

Ošlejšek

Rusňák

Burska

et al. 2021

IEEE Trans. Visual. Comput. Graphics

Self Cite

View full text Add to dashboard Cite

show abstract

“…Post-event reports following the exercises confirm our argument on the importance of teamwork in milCERTs. Kulich [14] collected the experiences of the Slovak team after the 2013 Locked Shields event. Besides the technical expertise in this team, he also highlights the challenges of the group:…”

Section: Role Of Cyber Exercisesmentioning

confidence: 99%

“…Next important aspect is the plan and its compliance, since the matter of course is the collaboration of all the groups together. Another important part is to define the way of how the members communicate, how they use collaboration tools, how they solve previous aims set, and how the experienced and well-informed individuals pass on their knowledge to the younger members of the team [14]. "…”

Section: Role Of Cyber Exercisesmentioning

confidence: 99%

Human Factors Approach to Cybersecurity Teamwork - The Military Perspective

Krasznay

Hamornik

2019

AiMT

View full text Add to dashboard Cite

Successful national cyber defence requires talented experts who can work together in teams. In military organizations, there has been a long history of methods defining how talents and teams can be developed. Drills and practices can serve as a unique opportunity for setting up successful groups to protect military IT systems even in the most hostile environment, however the cyberspace might be different from the physical space from the human perspective. In this paper, we introduce some ways of how cybersecurity incidents are managed in the military environment; in addition, we describe the main requirements towards humans in milCERTs and how these requirements differentiate from civilian CERTs. Further on, we highlight the institutional background of Hungary's cybersecurity training, specifically underlining the role of National University of Public Service in it, which is responsible for the education of all public servants, including cadets. The paper also focuses on the major challenges and some suggestions from Academia how to respond to them by building successful teams for the protection of national cyberspace.

show abstract

“…The experiment involved a Red vs. Blue exercise with 40 participants working in an emulated ICT infrastructure. The structure of the exercise is inspired by the Locked Shield exercise [8,10]. The participants were divided into four groups according to their role and tasks in the exercise.…”

Section: Exercise Participantsmentioning

confidence: 99%

Timely Feedback in Unstructured Cybersecurity Exercises

Vykopal

Ošlejšek

Burska

et al. 2018

Proceedings of the 49th ACM Technical Symposium on Computer Science Education

Self Cite

View full text Add to dashboard Cite

Cyber defence exercises are intensive, hands-on learning events for teams of professionals who gain or develop their skills to successfully prevent and respond to cyber attacks. The exercises mimic the real-life, routine operation of an organization which is being attacked by an unknown offender. Teams of learners receive very limited immediate feedback from the instructors during the exercise; they can usually see only a scoreboard showing the aggregated gain or loss of points for particular tasks. An in-depth analysis of learners' actions requires considerable human effort, which results in days or weeks of delay. The intensive experience is thus not followed by proper feedback facilitating actual learning, and this diminishes the effect of the exercise. In this initial work, we investigate how to provide valuable feedback to learners right after the exercise without any unnecessary delay. Based on the scoring system of a cyber defence exercise, we have developed a new feedback tool that presents an interactive, personalized timeline of exercise events. We deployed this tool during an international exercise, where we monitored participants' interactions and gathered their reflections. The results show that learners did use the new tool and rated it positively. Since this new feature is not bound to a particular defence exercise, it can be applied to all exercises that employ scoring based on the evaluation of individual exercise objectives. As a result, it enables the learner to immediately reflect on the experience gained.Comment: 6 pages; SIGCSE '18, Baltimore, MD, US

show abstract

Lessons learned from complex hands-on defence exercises in a cyber range

Cited by 63 publications

References 5 publications

Conceptual Model of Visual Analytics for Hands-on Cybersecurity Training

Conceptual Model of Visual Analytics for Hands-on Cybersecurity Training

Human Factors Approach to Cybersecurity Teamwork - The Military Perspective

Timely Feedback in Unstructured Cybersecurity Exercises

Contact Info

Product

Resources

About