Cyber Range: Preparing for Crisis or Something Just for Technical People?

Jani Päijänen, Karo Saharinen, Jarno Salonen, Tuomo Sipola, Jan Vykopal, Tero Kokkonen

Research output: Chapter in Book/Report/Conference proceedingConference article in proceedingsScientificpeer-review

Abstract

Digitalization has increased the significance of cybersecurity within the current highly interconnected society. The number and complexity of different cyber-attacks as well as other malicious activities has increased during the last decade
and affected the efforts needed to maintain a sufficient level of cyber resilience in organisations. Due to Industry 4.0 and the advanced use of IT and OT technologies and the adaptation of IoT devices, sensors, AI technology, etc., cybersecurity can no longer considered to be taken lightly when trying to gain a competitive advantage in business. When transferring from traditional reactive cybersecurity measures to proactive cyber resilience, cyber ranges are considered a particularly useful tool for keeping the organisation in the game. With their background in defence research (e.g., DARPA NCP in 2008), cyber
ranges are defined as interactive simulated platforms representing networks, systems, tools, and/or applications in a safe, legal environment that can be used for developing cyber skills or testing products and services. Cyber ranges can be
considered vital in facilitating and fostering cybersecurity training, certification, and general education. Despite the definition, cyber ranges seem to be only used by military or so-called “technical people” when quite a few more organisations
could benefit from them. This article attempts to reveal the secrets behind cyber ranges and their use focusing on suitable target environments, common functions, and use cases. Our main objective is to identify a classification of cyber ranges and skills related to these diverse types of ranges. We emphasise the cyber resilience of any type of organisation that demands the use of cyber range type of training. Different training scenarios improve different sets of organisational skills. The article is based on an extensive survey on cyber ranges, their use, and technical capabilities that was conducted in CyberSec4Europe
project.
Original languageEnglish
Title of host publicationProceeding of the 20th European Conference on Cyber Warfare and Security, ECCWS 2021
EditorsThaddeus Eze, Lee Speakman, Cyril Onwubiko
PublisherAcademic Conferences International (ACI)
Pages322-330
Number of pages9
ISBN (Electronic)978-1-912764-99-0
DOIs
Publication statusPublished - 24 Jun 2021
MoE publication typeA4 Article in a conference publication
Event20th European Conference on Cyber Warfare and Security - University of Chester, Chester, United Kingdom
Duration: 24 Jun 202125 Jun 2021

Publication series

SeriesEuropean conference on cyber warfare and security (ECCWS)
ISSN2048-8610

Conference

Conference20th European Conference on Cyber Warfare and Security
Abbreviated titleECCWS 2021
Country/TerritoryUnited Kingdom
CityChester
Period24/06/2125/06/21

Keywords

  • Cyber Range
  • Cyber Resilience
  • Cyber Training
  • Organisational Skills
  • Cybersecurity

Fingerprint

Dive into the research topics of 'Cyber Range: Preparing for Crisis or Something Just for Technical People?'. Together they form a unique fingerprint.

Cite this