Communication Dans Un Congrès Année : 2024

Methodology for automating attacking agents in cyber range training platforms

Résumé

The world faces cyberattacks daily and the targets of these attacks are often critical infrastructure, including the healthcare sector. In addition, more than half of cybersecurity professionals lack the necessary knowledge to deploy the relevant countermeasures to these attacks. In this regard, there is no doubt that education and training in cybersecurity are essential to defend technological assets. That is why, in this context, it is easy to understand that Cyber Ranges play a crucial role since these tools provide the user with a hyper-realistic experience for quality training. Thanks to attack simulators, commonly Advanced Persistent Threats (APT) generators, those realistic defensive cyberexercises can be performed. To implement these components, a behavioral matrix is needed, marking the different stages used by a cybersecurity expert during an attack, e.g. reconnaissance, explotation, data exfiltration, etc. Since bringing the current methodologies to a hyper-realistic production environment is an inordinate challenge, a novel matrix will be designed from simulation environments for training. This new methodology will compact dependent phases and simplify similar stages to automatically. Furthermore, the contribution contains a logic that increases the reality of the attacks. Finally, a proof of concept is made to evaluate the purposes the contribution purses.

Fichier principal
Vignette du fichier
preprint_sunriseB.pdf (509.93 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Licence

Dates et versions

hal-04913438 , version 1 (27-01-2025)

Licence

Identifiants

Citer

Pablo Martínez Sánchez, Pantaleone Nespoli, Joaquín García Alfaro, Félix Gómez Mármol. Methodology for automating attacking agents in cyber range training platforms. 35th Norwegian ICT Conference for Research and Education(NIKT), University of Stavanger, Nov 2023, Stavanger, Norway. pp.90-109, ⟨10.1007/978-3-031-55829-0_6⟩. ⟨hal-04913438⟩
70 Consultations
289 Téléchargements

Altmetric

Partager

  • More