Introduction to the Cyber Ranges (Chapman & Hall/Crc Cyber-physical Systems)

Cover
Half Title
Series Page
Title Page
Copyright Page
Contents
Preface
About the Authors
List of Abbreviations
Glossary
1. Introduction
	1.1. CSA
	1.2. Definition
	1.3. Need of CRs
		1.3.1. Use Cases of CRs
		1.3.2. Merits of CRs Training
	1.4. CRaaS
	1.5. On-Premise CR
	1.6. Types of CRs
	1.7. Conclusions
	References
2. Architectural Design and Tools of Cyber Ranges
	2.1. Architectural Modules and Their Functions
		2.1.1. Portal
		2.1.2. Run-Time Environments
			2.1.2.1. Emulation-Based Tools
			2.1.2.2. Simulation-Based Tools
			2.1.2.3. Traffic Generation Tools
			2.1.2.4. Management Tools
	References
3. Motivations for Construction of Cyber Ranges
	3.1. IT and OT Infrastructures
		3.1.1. Cybersecurity Challenges to OT/IT Systems
		3.1.2. Cybersecurity Implementations in OT/IT Systems
			3.1.2.1. Asset Management
			3.1.2.2. Governance
			3.1.2.3. Risk Assessment
			3.1.2.4. Cyber-Risk Awareness
			3.1.2.5. Cybersecurity Maintenance
			3.1.2.6. Cyber-Risk Detection
			3.1.2.7. Mitigation of Cyber Risk
			3.1.2.8. Cyber-Risk Analyses
		3.1.3. Need of CRs for WSS
		3.1.4. Need of CRs for Logistic Systems
		3.1.5. Need of CRs for Maritime Systems
		3.1.6. Need of CRs for O&G Industries
		3.1.7. Need of CRs for Power Systems
	3.2. Cyberattacks
		3.2.1. Cyberattacks on Critical Infrastructures
		3.2.2. Cyberthreats to Critical Infrastructures
	References
4. Types of Cyber Ranges
	4.1. Hybrid CRs
		4.1.1. EVA
		4.1.2. DIATEAM CR
		4.1.3. CRATE
	4.2. Physical CRs
		4.2.1. SCADA Testbeds
		4.2.2. SWAT
		4.2.3. WADI
	4.3. Virtual CRs
		4.3.1. CYRA
		4.3.2. GISOO
	4.4. CRaaS
	References
5. Roles of Cyber Ranges: Testing, Training, and Research
	5.1. CRs for Testing
		5.1.1. Penetration Testing
		5.1.2. Software Testing
		5.1.3. Security Testing
			5.1.3.1. Threat Model Testing
			5.1.3.2. Web Security Testing
	5.2. CRs for Training
		5.2.1. How to Use CRs for Trainings
		5.2.2. Cybersecurity Awareness Trainings
		5.2.3. Incident Response Trainings
	5.3. CRs for Research
	References
6. Cybersecurity Exercises and Teams Definition
	6.1. Need of CEs
	6.2. Life Cycle of a CE
	6.3. Steps in Designing of a CE
	6.4. Different Kinds of Approaches
	6.5. Common Features of a CE
	6.6. Types of CEs
		6.6.1. Examples of CEs
	6.7. Teams Definition
	6.8. Conclusions
	References
7. Simulation and Emulation Environments
	7.1. Emulation Environment
		7.1.1. Need for Emulation Environment
		7.1.2. Types of Emulation Models
		7.1.3. Emulators
			7.1.3.1. Dummynet
			7.1.3.2. NetEm
			7.1.3.3. NIST Net
	7.2. Simulation Environment
		7.2.1. Need for Simulation Environment
		7.2.2. Simulators
			7.2.2.1. NS2
			7.2.2.2. NS3
			7.2.2.3. OMNET++
			7.2.2.4. QualNet
	References
8. Designing a Cyber Range
	8.1. Planning Phase
		8.1.1. Security Challenges Supported by the CR
		8.1.2. Components for CR
		8.1.3. Defining CR Teams
	8.2. Architectural Considerations
	8.3. Implementation Phase
		8.3.1. IaC
	References
9. Military Cyber Ranges
	9.1. Need of MCRs
	9.2. Simulation-Based MCRs
		9.2.1. SIMTEX
			9.2.1.1. Introduction
			9.2.1.2. Origin
			9.2.1.3. Architecture
			9.2.1.4. Evolution
		9.2.2. CAAJED
			9.2.2.1. Introduction
			9.2.2.2. Origin
			9.2.2.3. Architecture
			9.2.2.4. Evolution
		9.2.3. SAST
			9.2.3.1. Introduction
			9.2.3.2. Origin
			9.2.3.3. Architecture
			9.2.3.4. Evolution
		9.2.4. StealthNet
			9.2.4.1. Introduction
			9.2.4.2. Origin
			9.2.4.3. Architecture
			9.2.4.4. Evolution
		9.2.5. Comparison of Simulation-Based MCRs
	9.3. Emulation-Based MCRs
		9.3.1. NCR
			9.3.1.1. Introduction
			9.3.1.2. Origin
			9.3.1.3. Architecture
			9.3.1.4. Evolution
		9.3.2. JIOR
			9.3.2.1. Introduction
			9.3.2.2. Origin
			9.3.2.3. Architecture
			9.3.2.4. Evolution
		9.3.3. DoD CSR
			9.3.3.1. Introduction
			9.3.3.2. Origin
			9.3.3.3. Architecture
			9.3.3.4. Evolution
		9.3.4. Comparison of Emulation-Based MCRs
	9.4. MACRs
		9.4.1. USMA IWAR
			9.4.1.1. Introduction
			9.4.1.2. Origin
			9.4.1.3. Architecture
			9.4.1.4. Evolution
		9.4.2. Estonian CR
			9.4.2.1. Introduction
			9.4.2.2. Origin
			9.4.2.3. Architecture
			9.4.2.4. Evolution
		9.4.3. KYPO Czech
			9.4.3.1. Introduction
			9.4.3.2. Origin
			9.4.3.3. Architecture
			9.4.3.4. Evolution
		9.4.4. Comparison of MACRs
	References
10. Existing Cyber Ranges in Academic Sector
	10.1. Simulation-Based ACRs
		10.1.1. SECUSIM
			10.1.1.1. Introduction
			10.1.1.2. Terminologies
			10.1.1.3. Architecture
		10.1.2. RINSE
			10.1.2.1. Introduction
			10.1.2.2. Architectural and Business Influences
			10.1.2.3. Architecture
		10.1.3. netEngine
			10.1.3.1. Introduction
			10.1.3.2. Architecture
		10.1.4. OPNET CR
			10.1.4.1. Introduction
			10.1.4.2. Architecture
			10.1.4.3. Simulation Workflow
		10.1.5. Concordia Consortium
			10.1.5.1. KYPO CR
			10.1.5.2. TELECOM Nancy CR
			10.1.5.3. RISE CR
			10.1.5.4. Airbus CR
			10.1.5.5. CODE CR
		10.1.6. Comparison of Simulation-Based ACRs
	10.2. Emulation-Based ACRs
		10.2.1. VCSTC
			10.2.1.1. Introduction
			10.2.1.2. Architecture
		10.2.2. LARIAT
			10.2.2.1. Introduction
			10.2.2.2. Architecture
		10.2.3. Emulab
			10.2.3.1. Introduction
			10.2.3.2. Architecture
		10.2.4. DETER
			10.2.4.1. Introduction
			10.2.4.2. DETERlab
			10.2.4.3. Architecture
		10.2.5. Virginia CR
			10.2.5.1. Introduction
			10.2.5.2. Architecture
		10.2.6. Comparison of Emulation-Based ACRs
	References
Index