Design Considerations for Cyber Security Testbeds: A Case Study on a Cyber Security Testbed for Education. Frank, M., Leitner, M., & Pahi, T. In 2017 IEEE 3rd Intl Conf Cyber Science and Technology Congress, pages 38–46, Orlando, Florida, November, 2017. IEEE. doi abstract bibtex Educational testbeds have been developed for many years. Within the past ten years, the development of cloud-based storage architectures as well as the facilitation of memory and storage technology allowed for the building of small to medium-sized testbeds at low or medium cost. These developments provide the foundation for the development of educational testbeds that can be used for cyber security training and exercise of various target groups (e.g., students, IT professionals, engineers) in many domains (e.g., cyber security, IoT, Industry 4.0). Testbeds have been well established within the information security community (e.g., malware analysis, cyber security experimentation, etc.). However, these testbeds often require a certain level of maintenance or resources and were therefore not often used in non-expert communities. However, it is essential that testbeds gain a wider audience in order to enable many different groups cyber security skills and competencies. In this paper, we analyze how an educational testbed could be designed by (1) examining established testbeds in research and education and (2) analyzing how typical testbeds are designed. Based on this, we propose a design life cycle, i.e. a methodology to facilitate the development of cyber security testbeds. We demonstrate our findings in a case study. In the study, we designed and implemented a cyber security testbed for educational purposes using open source technology. The results and reviewed literature validate the design life cycle and show dependencies between the underlying technology of the testbed and the designed challenges. These findings contribute to the overall development of testbeds and can be used as basis for future work. We plan to further extend this testbed in order to develop an automated and flexible cyber security testbed.
@inproceedings{FrankLP_design_2017,
address = {Orlando, Florida},
title = {Design Considerations for Cyber Security Testbeds: A Case Study on a Cyber Security Testbed for Education},
publisher = {IEEE},
doi = {10.1109/DASC-PICom-DataCom-CyberSciTec.2017.23},
booktitle = {2017 IEEE 3rd Intl Conf Cyber Science and Technology Congress},
author = {Frank, Maximilian and Leitner, Maria and Pahi, Timea},
month = nov,
year = {2017},
abstract = {Educational testbeds have been developed for many years. Within the past ten years, the development of cloud-based storage architectures as well as the facilitation of memory and storage technology allowed for the building of small to medium-sized testbeds at low or medium cost. These developments provide the foundation for the development of educational testbeds that can be used for cyber security training and exercise of various target groups (e.g., students, IT professionals, engineers) in many domains (e.g., cyber security, IoT, Industry 4.0). Testbeds have been well established within the information security community (e.g., malware analysis, cyber security experimentation, etc.). However, these testbeds often require a certain level of maintenance or resources and were therefore not often used in non-expert communities. However, it is essential that testbeds gain a wider audience in order to enable many different groups cyber security skills and competencies. In this paper, we analyze how an educational testbed could be designed by (1) examining established testbeds in research and education and (2) analyzing how typical testbeds are designed. Based on this, we propose a design life cycle, i.e. a methodology to facilitate the development of cyber security testbeds. We demonstrate our findings in a case study. In the study, we designed and implemented a cyber security testbed for educational purposes using open source technology. The results and reviewed literature validate the design life cycle and show dependencies between the underlying technology of the testbed and the designed challenges. These findings contribute to the overall development of testbeds and can be used as basis for future work. We plan to further extend this testbed in order to develop an automated and flexible cyber security testbed. },
keywords = {security, cyber range},
pages = {38--46}
}
Downloads: 0
{"_id":"eubLXHtSosgbhkFWw","bibbaseid":"frank-leitner-pahi-designconsiderationsforcybersecuritytestbedsacasestudyonacybersecuritytestbedforeducation-2017","downloads":0,"creationDate":"2018-07-19T17:20:12.342Z","title":"Design Considerations for Cyber Security Testbeds: A Case Study on a Cyber Security Testbed for Education","author_short":["Frank, M.","Leitner, M.","Pahi, T."],"year":2017,"bibtype":"inproceedings","biburl":"https://marialeitner.org/wp-content/uploads/2022/03/ml_publications.bib","bibdata":{"bibtype":"inproceedings","type":"inproceedings","address":"Orlando, Florida","title":"Design Considerations for Cyber Security Testbeds: A Case Study on a Cyber Security Testbed for Education","publisher":"IEEE","doi":"10.1109/DASC-PICom-DataCom-CyberSciTec.2017.23","booktitle":"2017 IEEE 3rd Intl Conf Cyber Science and Technology Congress","author":[{"propositions":[],"lastnames":["Frank"],"firstnames":["Maximilian"],"suffixes":[]},{"propositions":[],"lastnames":["Leitner"],"firstnames":["Maria"],"suffixes":[]},{"propositions":[],"lastnames":["Pahi"],"firstnames":["Timea"],"suffixes":[]}],"month":"November","year":"2017","abstract":"Educational testbeds have been developed for many years. Within the past ten years, the development of cloud-based storage architectures as well as the facilitation of memory and storage technology allowed for the building of small to medium-sized testbeds at low or medium cost. These developments provide the foundation for the development of educational testbeds that can be used for cyber security training and exercise of various target groups (e.g., students, IT professionals, engineers) in many domains (e.g., cyber security, IoT, Industry 4.0). Testbeds have been well established within the information security community (e.g., malware analysis, cyber security experimentation, etc.). However, these testbeds often require a certain level of maintenance or resources and were therefore not often used in non-expert communities. However, it is essential that testbeds gain a wider audience in order to enable many different groups cyber security skills and competencies. In this paper, we analyze how an educational testbed could be designed by (1) examining established testbeds in research and education and (2) analyzing how typical testbeds are designed. Based on this, we propose a design life cycle, i.e. a methodology to facilitate the development of cyber security testbeds. We demonstrate our findings in a case study. In the study, we designed and implemented a cyber security testbed for educational purposes using open source technology. The results and reviewed literature validate the design life cycle and show dependencies between the underlying technology of the testbed and the designed challenges. These findings contribute to the overall development of testbeds and can be used as basis for future work. We plan to further extend this testbed in order to develop an automated and flexible cyber security testbed. ","keywords":"security, cyber range","pages":"38–46","bibtex":"@inproceedings{FrankLP_design_2017,\n\taddress = {Orlando, Florida},\n\ttitle = {Design Considerations for Cyber Security Testbeds: A Case Study on a Cyber Security Testbed for Education},\n\tpublisher = {IEEE},\n\tdoi = {10.1109/DASC-PICom-DataCom-CyberSciTec.2017.23},\n\tbooktitle = {2017 IEEE 3rd Intl Conf Cyber Science and Technology Congress},\n\tauthor = {Frank, Maximilian and Leitner, Maria and Pahi, Timea},\n\tmonth = nov,\n\tyear = {2017},\n\tabstract = {Educational testbeds have been developed for many years. Within the past ten years, the development of cloud-based storage architectures as well as the facilitation of memory and storage technology allowed for the building of small to medium-sized testbeds at low or medium cost. These developments provide the foundation for the development of educational testbeds that can be used for cyber security training and exercise of various target groups (e.g., students, IT professionals, engineers) in many domains (e.g., cyber security, IoT, Industry 4.0). Testbeds have been well established within the information security community (e.g., malware analysis, cyber security experimentation, etc.). However, these testbeds often require a certain level of maintenance or resources and were therefore not often used in non-expert communities. However, it is essential that testbeds gain a wider audience in order to enable many different groups cyber security skills and competencies. In this paper, we analyze how an educational testbed could be designed by (1) examining established testbeds in research and education and (2) analyzing how typical testbeds are designed. Based on this, we propose a design life cycle, i.e. a methodology to facilitate the development of cyber security testbeds. We demonstrate our findings in a case study. In the study, we designed and implemented a cyber security testbed for educational purposes using open source technology. The results and reviewed literature validate the design life cycle and show dependencies between the underlying technology of the testbed and the designed challenges. These findings contribute to the overall development of testbeds and can be used as basis for future work. We plan to further extend this testbed in order to develop an automated and flexible cyber security testbed. },\n\tkeywords = {security, cyber range},\n\tpages = {38--46}\n}\n\n","author_short":["Frank, M.","Leitner, M.","Pahi, T."],"key":"FrankLP_design_2017","id":"FrankLP_design_2017","bibbaseid":"frank-leitner-pahi-designconsiderationsforcybersecuritytestbedsacasestudyonacybersecuritytestbedforeducation-2017","role":"author","urls":{},"keyword":["security","cyber range"],"metadata":{"authorlinks":{}}},"search_terms":["design","considerations","cyber","security","testbeds","case","study","cyber","security","testbed","education","frank","leitner","pahi"],"keywords":["security","cyber range"],"authorIDs":[],"dataSources":["dMP58F3Kn38LvzYub","4ns583B5s5eZ5sZnA","BjPesamjtLXF7hp7L"]}