An Effective Cybersecurity Exercises Platform CyExec and its Training Contents

Maki, Nobuaki; Nakata, Ryotaro; Toyoda, Shinichi; Kasai, Yosuke; Shin, Sanggyu; Seto, Yasuyuki

doi:10.18178/ijiet.2020.10.3.1366

Cited by 10 publications

(6 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This study adopts the CyExec architecture, which enables the use of exercise contents in Docker containers as an ecosystem [7] [8]. The exercise contents are developed as a system that can be provided and used via a web browser.…”

Section: Proposed Systemmentioning

confidence: 99%

“…The proposed system is based on the concept of the CyExec system [7] [8], which is previous research and has enhanced several new functions to make it practicable. The users can use the content, a sandbox built on server spaces using virtual container technology via a client-side Web browser.…”

Section: Introductionmentioning

confidence: 99%

“…As mentioned above, a security learning system that is easy for anyone to learn and operate is necessary to counter Japan's security personnel shortage and cyber attacks that are evolving year by year. As part of efforts to develop security personnel, some higher education institutions provide education through practical exercises [7][8][14] [15].…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Development of a Cybersecurity Training System Based on SaaS

Shin

2024

IIAI Letters on Informatics and Interdisciplinary Research

View full text Add to dashboard Cite

This study proposes the development of a cloud-based cyber attack and defense exercise system that enables practical cybersecurity exercises and experiences by using the Cyber Range environment built in a virtual space on the cloud via a local web browser. The platform and exercise programs will be developed on an open-source software platform built on the cloud as an ecosystem. The exercise contents will be developed using Docker, which has excellent portability, and attack and defense exercise scenarios will be produced as containers. By building the system in the cloud, this study proposes a platform that can be configured with various exercise scenarios independent of local PC performance. This study (1) develops a SaaS platform that can be connected to the cloud-based training environment via a web browser. (2) Enable users to interactively respond to attacks and defenses in a virtual space on the cloud in an internet environment. Finally, (3) The curriculums are structured based on microservices to be configured flexibly.

show abstract

Section: Proposed Systemmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Development of a Cybersecurity Training System Based on SaaS

Shin

2024

IIAI Letters on Informatics and Interdisciplinary Research

View full text Add to dashboard Cite

show abstract

“…Hence, we have focused on a lightweight execution environment and high portability of container-type virtu-alization for some time. We have developed a containerbased cyber range system called CyExec [7] and have been promoting its use as a cyber range ecosystem that can be jointly developed and used by multiple educational institutions. However, container-type virtualization is very different from the other virtualization types in conventional cyber ranges, and its superiority in terms of operating performance has not been demonstrated.…”

Section: Introductionmentioning

confidence: 99%

CyExec*: A High-Performance Container-Based Cyber Range With Scenario Randomization

Nakata

Otsuka

2021

IEEE Access

Self Cite

View full text Add to dashboard Cite

With increasing threats to information security, information security education through practical exercises specifically cyber range has attracted attention. However, the use of a cyber range is not widespread because of the high initial and maintenance cost and difficulty of developing new scenarios. Because many virtual instances are executed in the cyber range, the advantage of container type virtualization, which can provide a lightweight execution environment, is expected to increase efficient hardware utilization and decrease the total cost. On the other hand, containers pose challenges in scalability and scenario development when it comes to their use in cyber ranges because their performance advantages and vulnerability reproducibility have not been reported. In this paper, we conducted an exhaustive experiment to compare the performance and reproducibility of container-type virtualization with other virtualization types. The results show that containers can provide a more efficient execution environment than the other types, with almost perfect vulnerability reproducibility of more than 99% while reducing memory consumption by half and storage consumption to 1/60. The container's high performance and reproducibility enabled us to develop CyExec * , a cyber range system with DAG-based scenario randomization technology. CyExec * can increase educational effectiveness by automatically generating multiple scenarios with the same learning objective. Compared with a random scenario generator for CTF using another virtualization type, CyExec * shows more than three times higher performance. CyExec * can solve existing cyber range issues.

show abstract

“…In this paper, the ecosystem means a cybersecurity exercise platform that can promote joint development and joint use. This demand is the reason why we developed a cybersecurity exercise platform, Cybersecurity Exercises (from now on referred to as CyExec), using a virtual computer environment based on VirtualBox and Docker [10]. The exercise contents implemented on CyExec is composed of a "Basic Part" and an "Applied Part."…”

Section: Introductionmentioning

confidence: 99%

CyExec - Training Platform for Cybersecurity Education Based on a Virtual Environment

Shin

Seto

2020

International Journal of Learning Technologies and Learning Environments

Self Cite

View full text Add to dashboard Cite

In this paper, we propose the CyExec, an effective cybersecurity training platform in a virtual computer environment. Recently the threats of cyberattacks, especially of targeted attacks, are increasing rapidly, and a large number of cybersecurity incidents are frequently occurring. On the other hand, capable personnel is much lacking, becoming an urgent issue that strengthens the systematic human resource development cultivating capabilities for cybersecurity activities. Only a few parts of universities and companies in Japan are conducting education using an effective training system on the market because of expensive and difficult to use that adopted and operation the training system like Cyber Range in higher education institutions and SMEs. On this account, we developed a virtual environment named Cyber Security Exercises (CyExec) system utilizing VirtualBox and Docker to enforce practical cybersecurity exercises cost-effectively and flexibly. In our proposal, we imported the implementation of the OSS vulnerability diagnosis in our system, and developed and implemented a cyberattack and defense training program based on the WebGoat that cybersecurity training system program.

show abstract

An Effective Cybersecurity Exercises Platform CyExec and its Training Contents

Cited by 10 publications

References 0 publications

Development of a Cybersecurity Training System Based on SaaS

Development of a Cybersecurity Training System Based on SaaS

CyExec*: A High-Performance Container-Based Cyber Range With Scenario Randomization

CyExec - Training Platform for Cybersecurity Education Based on a Virtual Environment

Contact Info

Product

Resources

About