Real-Time Security Exercises on a Realistic Interdomain Routing Experiment Platform

Li, Yue; Liljenstam, Michael; Liu, Jason

doi:10.1109/pads.2009.12

Cited by 8 publications

(3 citation statements)

References 16 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In the literature, The RINSE simulator that is the real-time immersive network simulation environment for network security exercises was presented as a realistic rendering of network behavior [28]. In addition to that to execute real-time security exercises on a realistic inter-domain routing experiment platform was presented in the past [29]. A developed method for Job Performance Modeling (JPM) which uses vignettes for improving cybersecurity talent management through cyber defense competition design was described by Tobey [30].…”

Section: Patriciu and Furtunamentioning

confidence: 99%

The Concept of Cyber Defence Exercises (CDX): Planning, Execution, Evaluation

Seker

Ozbenli²

2018

2018 International Conference on Cyber Security and Protection of Digital Services (Cyber Security)

View full text Add to dashboard Cite

This paper discusses the concept of cyber defence exercises (CDX) that are very important tool when it comes to enhancing the safety awareness of cyberspace, testing an organization's ability to put up resistance and respond to different cyber events to establish the secure environment, gathering empirical data related to security, and looking at the practical training of experts on this subject. The exercises can give ideas to the decision makers about the precautions in the cybersecurity area and to the officials, institutions, organizations, and staff who are responsible on the cyber tools, techniques, and procedures that can be developed for this field. In the cyber defense exercises, the scenarios that are simulated closest to reality which provides very important contributions by bringing together the necessity of making the best decisions and management capabilities under the cyber crisis by handling stress and coordinated movement as a team. The objective of this paper is to address the issue from a scientific point of view by setting out the stages of planning, implementation, and evaluation of these exercises, taking into account and comparing international firefighting exercises. Another aim of the work is to be able to reveal the necessary processes that are required for all kind of cyber exercises, regardless of the type, although the processes involved vary according to the target mass of the planned exercise.Index Terms-Cyber defense, security exercises, cyber resilience, cyber threat, cyber security, cyber-attack mitigation, cyber crisis management. I. RELATED WORKCDX have been identified as an efficient mechanism to practice IT security awareness training [1,2] but are also an ultimate tool to reveal and define the different security needs of every organization [3]. It provides an excellent opportunity and ultimate learning experience [4,5] for the students to improve their skills in protecting and defending information systems are assessed in the context of realistic, true-to-life scenario [6]. On the other side, as discussed by Vigna [7] and Mink [8], the offensive security training is also an effective way to learn information security. The previous works in this area examined the structure [9] and how to use of cyber defence competitions, overall effectiveness of live-attack exercises in teaching information security [10], curriculum and course format at CDX in which teams design, implement, manage and defend a network of computers [11][12][13][14][15]. Other literature has examined the benefit of conducting cyber defense competitions at the K-12 level [16,17]. The architecture of a cyber defense competition [18] and different tools and techniques used and how they fit into an active learning approach and how it focuses on the operational aspect of managing and protecting an existing network infrastructure were described by Green et al [19].

show abstract

Section: Patriciu and Furtunamentioning

confidence: 99%

The Concept of Cyber Defence Exercises (CDX): Planning, Execution, Evaluation

Seker

Ozbenli²

2018

2018 International Conference on Cyber Security and Protection of Digital Services (Cyber Security)

View full text Add to dashboard Cite

show abstract

“…We were able to measure their effect on the round-trip time and data throughput of end applications. We also conducted realistic large-scale inter-domain routing experiments consisting of major autonomous systems connecting Swedish Internet users with realistic routing configurations derived from the routing registry (Li and Liu, 2009b). We ran a series of real-time security exercises on this routing system to study the consequence of intentionally propagating false routing information on interdomain routing and the effectiveness of corresponding defensive measures.…”

Section: Large-scale Routing Experimentsmentioning

confidence: 99%

Parallel and Distributed Immersive Real-Time Simulation of Large-Scale Networks

Liu¹

2010

Parallel and Distributed Computing

Self Cite

View full text Add to dashboard Cite

Network researchers need to embrace the challenge of designing the next-generation highperformance networking and software infrastructures that address the growing demand of distributed applications. These applications, particularly those potential "game changers" or "killer apps", such as voice-over-IP (VoIP) and peer-to-peer (P2P) applications surfaced in recent years, will significantly influence the way people conduct business and go about their daily lives. These distributed applications also include platforms that facilitate large-scale scientific experimentation through remote control and visualization. Many large-scale science applications-such as those in the field of astronomy, astrophysics, climate and environmental science, material science, particle physics, and social science-depend on the availability of high-performance facilities and advanced experimental instruments. Extreme networking capabilities together with effective high-end middleware infrastructures are of great importance to interconnecting these applications, computing resources and experimental facilities. "When all you have is a hammer, everything looks like a nail." The success of advancing critical technologies, to a large extent, depends on the available tools that can help effectively prototype, test, and analyze new designs and new ideas. Traditionally, network research has relied on a variety of tools. Physical network testbeds, such as WAIL (Barford and Landweber, 2003) and PlanetLab (Peterson et al., 2002), provide physical network connectivity; these testbeds are designed specifically for studying network protocols and services under real network conditions. However, the network condition of these testbeds is by and large constrained by the physical setup of the system and therefore inflexible for network researchers to explore a wide spectrum of the design space. To allow more flexibility, some of these testbeds, such as EmuLab (White et al., 2002) and VINI (Bavier et al., 2006), also offer emulation capabilities by modulating network traffic according to configuration and traffic condition of the target network. Physical and emulation testbeds currently are the mainstream for experimental networking research, primarily due to their capability of achieving desirable realism and accuracy. These testbeds, however, are costly to build. Due to limited resources available, conducting prolonged large-scale experiments on these platforms is difficult. Another solution is to use analytical models. Although analytical models are capable of bringing us important insight to the system design, dealing with a system as complex as the global network requires significantly simplified assumptions to be made to keep the models tractable. These simplified assumptions often 12 www.intechopen.com

show abstract

“…In term of hardware based environments, works in[73,65,69,7,88,90,5,39,42] use actual hardware cyber security scenario execution, these scenarios are mostly relate to IoT, SCADA and critical infrastructure. Works in[44,115,10,56,66,67,106,8] use different simulation and modeling techniques for cyber security scenario execution. Details of different event generation tools, like traffic and user behavior, are presented in section 4.4.6 and 4.4.7.Figure8indicates the type of the run time environment that are used in cyber ranges and security testbeds in the last 15 years.…”

mentioning

confidence: 99%