Cover
Half Title
Series Page
Title Page
Copyright Page
Contents
Preface
About the Authors
List of Abbreviations
Glossary
1. Introduction
1.1. CSA
1.2. Definition
1.3. Need of CRs
1.3.1. Use Cases of CRs
1.3.2. Merits of CRs Training
1.4. CRaaS
1.5. On-Premise CR
1.6. Types of CRs
1.7. Conclusions
References
2. Architectural Design and Tools of Cyber Ranges
2.1. Architectural Modules and Their Functions
2.1.1. Portal
2.1.2. Run-Time Environments
2.1.2.1. Emulation-Based Tools
2.1.2.2. Simulation-Based Tools
2.1.2.3. Traffic Generation Tools
2.1.2.4. Management Tools
References
3. Motivations for Construction of Cyber Ranges
3.1. IT and OT Infrastructures
3.1.1. Cybersecurity Challenges to OT/IT Systems
3.1.2. Cybersecurity Implementations in OT/IT Systems
3.1.2.1. Asset Management
3.1.2.2. Governance
3.1.2.3. Risk Assessment
3.1.2.4. Cyber-Risk Awareness
3.1.2.5. Cybersecurity Maintenance
3.1.2.6. Cyber-Risk Detection
3.1.2.7. Mitigation of Cyber Risk
3.1.2.8. Cyber-Risk Analyses
3.1.3. Need of CRs for WSS
3.1.4. Need of CRs for Logistic Systems
3.1.5. Need of CRs for Maritime Systems
3.1.6. Need of CRs for O&G Industries
3.1.7. Need of CRs for Power Systems
3.2. Cyberattacks
3.2.1. Cyberattacks on Critical Infrastructures
3.2.2. Cyberthreats to Critical Infrastructures
References
4. Types of Cyber Ranges
4.1. Hybrid CRs
4.1.1. EVA
4.1.2. DIATEAM CR
4.1.3. CRATE
4.2. Physical CRs
4.2.1. SCADA Testbeds
4.2.2. SWAT
4.2.3. WADI
4.3. Virtual CRs
4.3.1. CYRA
4.3.2. GISOO
4.4. CRaaS
References
5. Roles of Cyber Ranges: Testing, Training, and Research
5.1. CRs for Testing
5.1.1. Penetration Testing
5.1.2. Software Testing
5.1.3. Security Testing
5.1.3.1. Threat Model Testing
5.1.3.2. Web Security Testing
5.2. CRs for Training
5.2.1. How to Use CRs for Trainings
5.2.2. Cybersecurity Awareness Trainings
5.2.3. Incident Response Trainings
5.3. CRs for Research
References
6. Cybersecurity Exercises and Teams Definition
6.1. Need of CEs
6.2. Life Cycle of a CE
6.3. Steps in Designing of a CE
6.4. Different Kinds of Approaches
6.5. Common Features of a CE
6.6. Types of CEs
6.6.1. Examples of CEs
6.7. Teams Definition
6.8. Conclusions
References
7. Simulation and Emulation Environments
7.1. Emulation Environment
7.1.1. Need for Emulation Environment
7.1.2. Types of Emulation Models
7.1.3. Emulators
7.1.3.1. Dummynet
7.1.3.2. NetEm
7.1.3.3. NIST Net
7.2. Simulation Environment
7.2.1. Need for Simulation Environment
7.2.2. Simulators
7.2.2.1. NS2
7.2.2.2. NS3
7.2.2.3. OMNET++
7.2.2.4. QualNet
References
8. Designing a Cyber Range
8.1. Planning Phase
8.1.1. Security Challenges Supported by the CR
8.1.2. Components for CR
8.1.3. Defining CR Teams
8.2. Architectural Considerations
8.3. Implementation Phase
8.3.1. IaC
References
9. Military Cyber Ranges
9.1. Need of MCRs
9.2. Simulation-Based MCRs
9.2.1. SIMTEX
9.2.1.1. Introduction
9.2.1.2. Origin
9.2.1.3. Architecture
9.2.1.4. Evolution
9.2.2. CAAJED
9.2.2.1. Introduction
9.2.2.2. Origin
9.2.2.3. Architecture
9.2.2.4. Evolution
9.2.3. SAST
9.2.3.1. Introduction
9.2.3.2. Origin
9.2.3.3. Architecture
9.2.3.4. Evolution
9.2.4. StealthNet
9.2.4.1. Introduction
9.2.4.2. Origin
9.2.4.3. Architecture
9.2.4.4. Evolution
9.2.5. Comparison of Simulation-Based MCRs
9.3. Emulation-Based MCRs
9.3.1. NCR
9.3.1.1. Introduction
9.3.1.2. Origin
9.3.1.3. Architecture
9.3.1.4. Evolution
9.3.2. JIOR
9.3.2.1. Introduction
9.3.2.2. Origin
9.3.2.3. Architecture
9.3.2.4. Evolution
9.3.3. DoD CSR
9.3.3.1. Introduction
9.3.3.2. Origin
9.3.3.3. Architecture
9.3.3.4. Evolution
9.3.4. Comparison of Emulation-Based MCRs
9.4. MACRs
9.4.1. USMA IWAR
9.4.1.1. Introduction
9.4.1.2. Origin
9.4.1.3. Architecture
9.4.1.4. Evolution
9.4.2. Estonian CR
9.4.2.1. Introduction
9.4.2.2. Origin
9.4.2.3. Architecture
9.4.2.4. Evolution
9.4.3. KYPO Czech
9.4.3.1. Introduction
9.4.3.2. Origin
9.4.3.3. Architecture
9.4.3.4. Evolution
9.4.4. Comparison of MACRs
References
10. Existing Cyber Ranges in Academic Sector
10.1. Simulation-Based ACRs
10.1.1. SECUSIM
10.1.1.1. Introduction
10.1.1.2. Terminologies
10.1.1.3. Architecture
10.1.2. RINSE
10.1.2.1. Introduction
10.1.2.2. Architectural and Business Influences
10.1.2.3. Architecture
10.1.3. netEngine
10.1.3.1. Introduction
10.1.3.2. Architecture
10.1.4. OPNET CR
10.1.4.1. Introduction
10.1.4.2. Architecture
10.1.4.3. Simulation Workflow
10.1.5. Concordia Consortium
10.1.5.1. KYPO CR
10.1.5.2. TELECOM Nancy CR
10.1.5.3. RISE CR
10.1.5.4. Airbus CR
10.1.5.5. CODE CR
10.1.6. Comparison of Simulation-Based ACRs
10.2. Emulation-Based ACRs
10.2.1. VCSTC
10.2.1.1. Introduction
10.2.1.2. Architecture
10.2.2. LARIAT
10.2.2.1. Introduction
10.2.2.2. Architecture
10.2.3. Emulab
10.2.3.1. Introduction
10.2.3.2. Architecture
10.2.4. DETER
10.2.4.1. Introduction
10.2.4.2. DETERlab
10.2.4.3. Architecture
10.2.5. Virginia CR
10.2.5.1. Introduction
10.2.5.2. Architecture
10.2.6. Comparison of Emulation-Based ACRs
References
Index