Automated computer forensics training in a virtualized environment

Brueckner, Stephen; Guaspari, David; Adelstein, Frank; Weeks, Joseph L.

doi:10.1016/j.diin.2008.05.009

Cited by 11 publications

(6 citation statements)

References 2 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Exata is yet another commercially available simulation-based CR. A number of emulation-based CR are currently on offer, a good example being the ATC [ 39 ].…”

Section: Scenarios and Applicationsmentioning

confidence: 99%

A Review of Cyber-Ranges and Test-Beds: Current and Future Trends

Ukwandu

Farah

Hindy

et al. 2020

Sensors

View full text Add to dashboard Cite

Cyber situational awareness has been proven to be of value in forming a comprehensive understanding of threats and vulnerabilities within organisations, as the degree of exposure is governed by the prevailing levels of cyber-hygiene and established processes. A more accurate assessment of the security provision informs on the most vulnerable environments that necessitate more diligent management. The rapid proliferation in the automation of cyber-attacks is reducing the gap between information and operational technologies and the need to review the current levels of robustness against new sophisticated cyber-attacks, trends, technologies and mitigation countermeasures has become pressing. A deeper characterisation is also the basis with which to predict future vulnerabilities in turn guiding the most appropriate deployment technologies. Thus, refreshing established practices and the scope of the training to support the decision making of users and operators. The foundation of the training provision is the use of Cyber-Ranges (CRs) and Test-Beds (TBs), platforms/tools that help inculcate a deeper understanding of the evolution of an attack and the methodology to deploy the most impactful countermeasures to arrest breaches. In this paper, an evaluation of documented CRs and TBs platforms is evaluated. CRs and TBs are segmented by type, technology, threat scenarios, applications and the scope of attainable training. To enrich the analysis of documented CRs and TBs research and cap the study, a taxonomy is developed to provide a broader comprehension of the future of CRs and TBs. The taxonomy elaborates on the CRs/TBs dimensions, as well as, highlighting a diminishing differentiation between application areas.

show abstract

“…Exata is yet another commercially available simulation-based CR. A number of emulation-based CR are currently on offer, a good example being the ATC [ 39 ].…”

Section: Scenarios and Applicationsmentioning

confidence: 99%

A Review of Cyber-Ranges and Test-Beds: Current and Future Trends

Ukwandu

Farah

Hindy

et al. 2020

Sensors

View full text Add to dashboard Cite

show abstract

“…Exata is yet another commercially available simulation-based CR. A number of emulation-based CR are currently on offer, a good example being the ATC [28].…”

Section: Cr and Tb Applicationsmentioning

confidence: 99%

A Review of Cyber-Ranges and Test-Beds: Current and Future Trends

Ukwandu¹,

Farah²,

Hindy³

et al. 2020

Preprint

View full text Add to dashboard Cite

Cyber situational awareness has been proven to be of value in forming a comprehensive understanding of threats and vulnerabilities within organisations, as the degree of exposure is governed by the prevailing levels of cyber-hygiene and established processes. A more accurate assessment of the security provision informs on the most vulnerable environments that necessitate more diligent management. The rapid proliferation in the automation of cyber-attacks is reducing the gap between information and operational technologies and the need to review the current levels of robustness against new sophisticated cyber-attacks, trends, technologies and mitigation countermeasures has become pressing. A deeper characterisation is also the basis with which to predict future vulnerabilities in turn guiding the most appropriate deployment technologies. Thus, refreshing established practices and the scope of the training to support the decision making of users and operators. The foundation of the training provision is the use of Cyber-Ranges (CRs) and Test-Beds (TBs), platforms/tools that help inculcate a deeper understanding of the evolution of an attack and the methodology to deploy the most impactful countermeasures to arrest breaches. In this paper, an evaluation of documented CR and TB platforms is evaluated. CRs and TBs are segmented by type, technology, threat scenarios, applications and the scope of attainable training. To enrich the analysis of documented CR and TB research and cap the study, a taxonomy is developed to provide a broader comprehension of the future of CRs and TBs. The taxonomy elaborates on the CRs/TBs different dimensions, as well as, highlighting a diminishing differentiation between application areas.

show abstract

“…Such automated systems are typically implemented with a predetermined set of task outcomes or behaviors in mind (Ceschi et al 2014). There has been plenty research on automated task-based team performance assessment in micro-world studies (Brehmer and Dörner 1993;Johansson et al 2003;Cooke et al 2004;Dubé et al 2011;Persson and Rigas 2014), military simulations (Martin and Foltz 2004;Frank et al 2008; and cyber defense exercises (Brueckner et al 2008;Geers 2010;Granåsen and Andersson 2016). Task-based metrics are highly relevant and can accurately reflect effectiveness in their specific simulated environments.…”

Section: Models Of Team Performance and Effectivenessmentioning

confidence: 99%

Towards automated assessment of team performance by mimicking expert observers’ ratings

Granåsen

2018

Cogn Tech Work

View full text Add to dashboard Cite

Automation is the holy grail of performance assessment. Cheap and reliable automated systems that produce consistent feedback on performance. Many such systems have been proposed that accurately measure the state of a product or the outcome of a process. Procedural faults can be detected and even mitigated without the need for human interference. In production industry and professional sports, this is a natural part of business. However, in macrocognitive team performance studies, human appraisal is still king. This study investigates the reliability of human observers as assessors of performance among virtual teams, and what they base their assessments on when only able to monitor one of the team members at a time. The results show that expert observers put a lot of emphasis on task outcomes and on communication and are generally reliable raters of team performance, but there are several aspects that they cannot rate reliably under these circumstances, e.g., team workload, stress, and collaborative problem-solving. Through simple algorithms, this study shows that by capturing task scores and different quantitative communication metrics, team performance ratings can be estimated to closely match how the expert observers assess team performance in a virtual team setting. The implication of the study is that numeric team performance estimations can be acquired by automated systems, with reasonable accuracy and reliability compared to observer ratings.

show abstract

Automated computer forensics training in a virtualized environment

Cited by 11 publications

References 2 publications

A Review of Cyber-Ranges and Test-Beds: Current and Future Trends

A Review of Cyber-Ranges and Test-Beds: Current and Future Trends

A Review of Cyber-Ranges and Test-Beds: Current and Future Trends

Towards automated assessment of team performance by mimicking expert observers’ ratings

Contact Info

Product

Resources

About