A Review of Cyber-Ranges and Test-Beds: Current and Future Trends
Open Access
- 13 December 2020
- Vol. 20 (24), 7148
- https://doi.org/10.3390/s20247148
Abstract
Cyber situational awareness has been proven to be of value in forming a comprehensive understanding of threats and vulnerabilities within organisations, as the degree of exposure is governed by the prevailing levels of cyber-hygiene and established processes. A more accurate assessment of the security provision informs on the most vulnerable environments that necessitate more diligent management. The rapid proliferation in the automation of cyber-attacks is reducing the gap between information and operational technologies and the need to review the current levels of robustness against new sophisticated cyber-attacks, trends, technologies and mitigation countermeasures has become pressing. A deeper characterisation is also the basis with which to predict future vulnerabilities in turn guiding the most appropriate deployment technologies. Thus, refreshing established practices and the scope of the training to support the decision making of users and operators. The foundation of the training provision is the use of Cyber-Ranges (CRs) and Test-Beds (TBs), platforms/tools that help inculcate a deeper understanding of the evolution of an attack and the methodology to deploy the most impactful countermeasures to arrest breaches. In this paper, an evaluation of documented CRs and TBs platforms is evaluated. CRs and TBs are segmented by type, technology, threat scenarios, applications and the scope of attainable training. To enrich the analysis of documented CRs and TBs research and cap the study, a taxonomy is developed to provide a broader comprehension of the future of CRs and TBs. The taxonomy elaborates on the CRs/TBs dimensions, as well as, highlighting a diminishing differentiation between application areas.Keywords
This publication has 46 references indexed in Scilit:
- SoftGridPublished by Association for Computing Machinery (ACM) ,2016
- Cyber Situational Awareness TestingAdvanced Sciences and Technologies for Security Applications, 2016
- WAMS Cyber-Physical Test Bed for Power System, Cybersecurity Study, and Data MiningIEEE Transactions on Smart Grid, 2016
- Developing a Distributed Software Defined Networking Testbed for IoTProcedia Computer Science, 2016
- 5G mobile technology: A surveyICT Express, 2015
- Learning Cyber Security Through GamificationIndian Journal of Science and Technology, 2015
- National Cyber Range OverviewPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2014
- Stuxnet: What Has Changed?Future Internet, 2012
- A Guide to Conducting a Systematic Literature Review of Information Systems ResearchSSRN Electronic Journal, 2010
- Automated computer forensics training in a virtualized environmentDigital Investigation, 2008