Development of Training System and Practice Contents for Cybersecurity Education

Shin, Sanggyu; Seto, Yasuyuki; Kasai, Yosuke; Ka, Rituna; Kuroki, Daishi; Toyoda, Shinichi; Hasegawa, Koji; Midorikawa, Kazuhiro

doi:10.1109/iiai-aai.2019.00043

Cited by 7 publications

(5 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The deployment is on-premise with a resp. several virtual machines (VMs) due to the architecture of our TAME range, as outlined by (Shin et al, 2019). Although VMware is the primary installation, VirtualBox or other products could be imported.…”

Section: Training Environmentmentioning

confidence: 99%

“…The description utilizes JavaScript Object Notation (JSON) as a prominent candidate for descriptions on the Internet, similar to the related work. Depending on the cyber range, either automated provisioning with tools such as Vagrant and Puppet or VMs are set up (Shin et al, 2019). In consequence, the descriptions either result (with translation) in automated provisioning or can be used to build the VMs.…”

Section: Descriptionmentioning

confidence: 99%

See 1 more Smart Citation

How to Design a Blue Team Scenario for Beginners on the Example of Brute-Force Attacks on Authentications

Eipper

Pöhn

2023

Proceedings of the 9th International Conference on Information Systems Security and Privacy

View full text Add to dashboard Cite

Cyber attacks are ubiquitous and a constantly growing threat in the age of digitization. In order to protect important data, developers and system administrators must be trained and made aware of possible threats. Practical training can be used for students alike to introduce them to the topic. A constant threat to websites that require user authentication is so-called brute-force attacks, which attempt to crack a password by systematically trying every possible combination. As this is a typical threat, but comparably easy to detect, it is ideal for beginners. Therefore, three open-source blue team scenarios are designed and systematically described. They are contiguous to maximize the learning effect.

show abstract

Section: Training Environmentmentioning

confidence: 99%

Section: Descriptionmentioning

confidence: 99%

How to Design a Blue Team Scenario for Beginners on the Example of Brute-Force Attacks on Authentications

Eipper

Pöhn

2023

Proceedings of the 9th International Conference on Information Systems Security and Privacy

View full text Add to dashboard Cite

show abstract

“…In recent years, the implementation of this type of application has also been utilized through various security topics. In cyber security simulation and learning application, Shin S, Seto Y, Kasai Y, Ka R, Kuroki D, Toyoda S et al [7] built a learning media platform called CyExec to help cyber security learning systems with attack and defense programs. The program is then built-in virtual box and docker technology.…”

Section: Related Workmentioning

confidence: 99%

Web Application Security Education Platform Based on OWASP API Security Project

Idris

Syarif

Winarno

2022

EMITTER Int'l J. of Engin. Technol.

View full text Add to dashboard Cite

The trend of API-based systems in web applications in the last few years keeps steadily growing. API allows web applications to interact with external systems to enable business-to-business or system-to-system integration which leads to multiple application innovations. However, this trend also comes with a different surface of security problems that can harm not only web applications, but also mobile and IoT applications. This research proposed a web application security education platform which is focused on the OWASP API security project. This platform provides different security risks such as excessive data exposure, lack of resources and rate-limiting, mass assignment, and improper asset management which cannot be found in monolithic security learning application like DVWA, WebGoat, and Multillidae II. The development also applies several methodologies such as Capture-The-Flag (CTF) learning model, vulnerability assessment, and container virtualization. Based on our experiment, we are successfully providing 10 API vulnerability challenges to the platform with 3 different levels of severity risk rating which can be exploited using tools like Burp Suite, SQLMap, and JWTCat. In the end, based on our performance experiment, all of the containers on the platform can be deployed in approximately 16 seconds with minimum storage resource and able to serve up to 1000 concurrent users with the average throughput of 50.58 requests per second, 96.35% successful requests, and 15.94s response time.

show abstract

“…The CyExec ( Nakata & Otsuka, 2021 ; Shin et al, 2019 ) deployed in with Docker containers in a VirtualBox-configured virtual environment. We may easily create a practice environment for each purpose by performing vulnerability assessments and other exercise programs on assaults and defenses and running them on a Docker container.…”

Section: Introductionmentioning

confidence: 99%

A novel autonomous container-based platform for cybersecurity training and research

Chouliaras,

Kantzavelou,

Maglaras

et al. 2023

PeerJ Computer Science

View full text Add to dashboard Cite

Cyberattacks, particularly those targeting systems that store or handle sensitive data, have become more sophisticated in recent years. To face increasing threats, continuous capacity building and digital skill competence are needed. Cybersecurity hands-on training is essential to upskill cybersecurity professionals. However, the cost of developing and maintaining a cyber range platform is high. Setting up an ideal digital environment for cybersecurity exercises can be challenging and often need to invest a lot of time and system resources in this process. In this article, we present a lightweight cyber range platform that was developed under the open-source cloud platform OpenStack, based on Docker technology using IaC methodology. Combining the advantages of Docker technology, DevOps automation capabilities, and the cloud platform, the proposed cyber range platform achieves the maximization of performance and scalability while reducing costs and resources.

show abstract

Development of Training System and Practice Contents for Cybersecurity Education

Cited by 7 publications

References 0 publications

How to Design a Blue Team Scenario for Beginners on the Example of Brute-Force Attacks on Authentications

How to Design a Blue Team Scenario for Beginners on the Example of Brute-Force Attacks on Authentications

Web Application Security Education Platform Based on OWASP API Security Project

A novel autonomous container-based platform for cybersecurity training and research

Contact Info

Product

Resources

About