@inproceedings{856e9334feeb434f8280484dcd22d7a2,
title = "Cyber Range: Preparing for Crisis or Something Just for Technical People?",
abstract = "Digitalization has increased the significance of cybersecurity within the current highly interconnected society. The number and complexity of different cyber-attacks as well as other malicious activities has increased during the last decade and affected the efforts needed to maintain a sufficient level of cyber resilience in organisations. Due to Industry 4.0 and the advanced use of IT and OT technologies and the adaptation of IoT devices, sensors, AI technology, etc., cybersecurity can no longer considered to be taken lightly when trying to gain a competitive advantage in business. When transferring from traditional reactive cybersecurity measures to proactive cyber resilience, cyber ranges are considered a particularly useful tool for keeping the organisation in the game. With their background in defence research (e.g., DARPA NCP in 2008), cyber ranges are defined as interactive simulated platforms representing networks, systems, tools, and/or applications in a safe, legal environment that can be used for developing cyber skills or testing products and services. Cyber ranges can be considered vital in facilitating and fostering cybersecurity training, certification, and general education. Despite the definition, cyber ranges seem to be only used by military or so-called “technical people” when quite a few more organisations could benefit from them. This article attempts to reveal the secrets behind cyber ranges and their use focusing on suitable target environments, common functions, and use cases. Our main objective is to identify a classification of cyber ranges and skills related to these diverse types of ranges. We emphasise the cyber resilience of any type of organisation that demands the use of cyber range type of training. Different training scenarios improve different sets of organisational skills. The article is based on an extensive survey on cyber ranges, their use, and technical capabilities that was conducted in CyberSec4Europe project.",
keywords = "Cyber Range, Cyber Resilience, Cyber Training, Organisational Skills, Cybersecurity",
author = "Jani P{\"a}ij{\"a}nen and Karo Saharinen and Jarno Salonen and Tuomo Sipola and Jan Vykopal and Tero Kokkonen",
note = "doi ei toimi viel{\"a}, http://dx.doi.org/10.34190/EWS.21.012; 20th European Conference on Cyber Warfare and Security, ECCWS 2021 ; Conference date: 24-06-2021 Through 25-06-2021",
year = "2021",
month = jun,
day = "24",
doi = "10.34190/EWS.21.012",
language = "English",
series = "European conference on cyber warfare and security (ECCWS)",
publisher = "Academic Conferences International (ACI)",
pages = "322--330",
editor = "Thaddeus Eze and Lee Speakman and Cyril Onwubiko",
booktitle = "Proceeding of the 20th European Conference on Cyber Warfare and Security, ECCWS 2021",
address = "United Kingdom",
}