Dear All,
I add 2 more papers from SPARTA WP9 that will be presented at ARES ETACS:
Tomas Lieskovan and Jan Hajný: Building Open Source Cyber Range To Teach Cyber Security
This paper deals with the use of cyber range in education to teach cybersecurity.
Particular attention is paid exclusively to open-source solutions, as such solutions are
available to the general public, which is essential in raising awareness of cyber defense.
First,the available open-source cyber ranges are described, their advantages and
disadvantages. Subsequently, it presents our selected solution, the procedure of
implementation in the Brno University of Technology laboratory, our use in our study
programe and stress testing of selected cyber range. Last but not least, it provides a
unique guide to designing and building own open-source cyber range LAB from scratch.
Jan Hajny, Sara Ricci, Edmundas Piesarskas and Marek Sikora: Cybersecurity Curricula
Designer
The paper aims at minimizing the skills gaps and skills shortages on the cybersecurity job
market by empowering education and training institutions during the process of creation of
new cybersecurity study programs. We provide a complex cybersecurity skills framework
based on standardized definitions that helps with the identification of skills and
knowledge necessary for cybersecurity work positions. Furthermore, we practically
implement the framework in the form of an interactive web application for cybersecurity
curricula design. The app, called Curricula Designer, is built upon the framework and
allows intuitive design of higher-education curricula and their analysis with respect to
requirements of work roles already defined in widely-accepted standards. Using the
analytical functions, it is easy to identify missing content in the courses and precisely
structure the study program so that the graduates are well-prepared to enter the job
market. The Curricula Designer is described in details in this paper, including user
interface and technical background, and a link for public free access is provided to serve
all education and training institutions.
Kind regards,
Jan
——
doc. Ing. Jan Hajný, Ph.D.
Advanced Cybersecurity
Brno University of Technology
Phone: +420 541 146 961
WWW:
http://crypto.utko.feec.vutbr.cz <http://crypto.utko.feec.vutbr.cz/>
1. 6. 2021 v 8:41, Giorgio Bernardinetti
<giorgio.bernardinetti(a)cnit.it>it>:
Dear all,
We submitted a paper to ETACS ’21 (ARES ’21) and it was accepted. We plan to acknowledge
the SPARTA project as this paper is in strong relationship with what was done in the WP9
recent work.
Kind regards,
Giorgio Bernardinetti
Details of the paper:
Title: Nautilus: A Tool For Automated Deployment And Sharing Of Cyber Range Scenarios
By: G. Bernardinetti, S. Iafrate and G. Bianchi
Abstract: In any cybersecurity training program, a non-marginal fraction of the
activities are usually devoted to "hands-on" practice, typically in the form of
vulnerable scenarios that the trainee must evaluate/penetrate. The manual setup and
implementation of such training scenarios is a significant burden on trainers, and takes
away valuable time. In order to automate this step and enable reuse of components or even
entire scenarios, this paper proposes Nautilus, a Cyber Range with extended capabilities
that at the same time provides a training environment and a "marketplace"
platform to share scenarios, pre-implemented vulnerabilities/CVEs, scripts, etc. Nautilus
leverages advanced cloud technologies to semi-automate deployment of vulnerable
configurations of virtualized networks and systems, provides a graphical interface and a
scenario description language, and integrates easy-to-use data/knowledge sharing
facilities. In this respect, we believe that Nautilus can foster collaboration among
different training teams and programs, and stimulate less skilled trainers, which alone
would have perhaps prepared only basic scenarios, to access and reuse more advanced
exercises prepared by others. Finally, we preliminary show the effectiveness and ease of
use of the Nautilus Cyber Range via the results of a (so far) small-scale usability test
conducted among different perspective trainers.
--
bodies.dissemination-committee mailing list
bodies.dissemination-committee(a)server.sparta.eu
http://server.sparta.eu/cgi-bin/mailman/listinfo/bodies.dissemination-commi…