The DETER project: Advancing the science of cyber security experimentation and test

Mirković, Jelena; Benzel, Terry; Faber, Ted; Braden, Robert; Wroclawski, John; Schwab, Stephen

doi:10.1109/ths.2010.5655108

Cited by 71 publications

(40 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…There is an extensive survey of state-of-the-art cyber ranges and testbeds [19]. One very popular cyber range is DETER/DeterLab [20], [21], which is based on Emulab and was started with the goal of advancing cyber security research and education in 2004. Nowadays, there exist many other cyber ranges, e. g., National Cyber Range (NCR) [22], Michigan Cyber Range (MCR) [23], SimSpace Cyber Range [24], EDURange [25], or KYPO Cyber Range [26].…”

Section: Cyber Rangesmentioning

confidence: 99%

Lessons learned from complex hands-on defence exercises in a cyber range

Vykopal

Vizváry

Ošlejšek

et al. 2017

2017 IEEE Frontiers in Education Conference (FIE)

View full text Add to dashboard Cite

Abstract-We need more skilled cybersecurity professionals because the number of cyber threats and ingenuity of attackers is ever growing. Knowledge and skills required for cyber defence can be developed and exercised by lectures and lab sessions, or by active learning, which is seen as a promising and attractive alternative. In this paper, we present experience gained from the preparation and execution of cyber defence exercises involving various participants in a cyber range. The exercises follow a Red vs. Blue team format, in which the Red team conducts malicious activities against emulated networks and systems that have to be defended by Blue teams of learners. Although this exercise format is popular and used worldwide by numerous organizers in practice, it has been sparsely researched. We contribute to the topic by describing the general exercise life cycle, covering the exercise's development, dry run, execution, evaluation, and repetition. Each phase brings several challenges that exercise organizers have to deal with. We present lessons learned that can help organizers to prepare, run and repeat successful events systematically, with lower effort and costs, and avoid a trial-and-error approach that is often used.

show abstract

Section: Cyber Rangesmentioning

confidence: 99%

Lessons learned from complex hands-on defence exercises in a cyber range

Vykopal

Vizváry

Ošlejšek

et al. 2017

2017 IEEE Frontiers in Education Conference (FIE)

View full text Add to dashboard Cite

show abstract

“…Users receive exclusive, hardware-levelaccess to the number of machines they need, and may setup network topologies, operating systems, and applications oftheir choice.The testbed can be accessed from any machinethat runs a web browser and has an SSH client. Under normal circumstances, no traffic is allowed to leave orenter an experiment except via the supported SSH tunnel [18].…”

Section: Software Defined Networkmentioning

confidence: 99%

“…The DETER's contributions has already helped inbetter recognizing significant new challenges in cybersecurity field.Most of thesechallenges are related to the diversity of users and uses ofnetwork testbeds, the fast pace with which the cybersecurityfield is moving, and the unpredictability and complexity of working with real hardware and software, especially at large scale.Based on these, it is now obvious that the bestapproach for cybersecurity experimentation can bethe adoptionof proactivedevelopment strategy instead of reactiveresponse to specific risks [18].…”

Section: Software Defined Networkmentioning

confidence: 99%

On the Necessity of Establishing a National Cybersecurity Testbed

Al-Janabi

2016

juhd

View full text Add to dashboard Cite

Abstract--Information security now is considered to be cross-disciplinary and comprehensive field. It integrates the accumulation of knowledge in many disciplines like computer science, mathematics, communications, electronics, physics, etc. Thus, there has been an ongoing effort to improve the experiences in information security experimentation. Many international institutions are investigating enhanced approaches to provide hands-on learning and research environments. However, academic institutions are facing with the difficult challenge of providing lab infrastructuresthat meet the increasingly growing needs of cybersecurity training. In this paper, we report on the necessity and importance of building an effective national testbed for cybersecurity experimentation. We also present a general top-level architecture for this testbed emphasizing the most important enabling technologies.

show abstract

“…There are successful initiatives in different computer science fields (e.g., DETER [7] in cybersecurity experimentation or PlanetLab in the peer-to-peer community) that provide good tools for their users. However, when conducting experiments and analysis in the HPC domain, several specific aspects need to be considered.…”

Section: Related Workmentioning

confidence: 99%

An Effective Git And Org-Mode Based Workflow For Reproducible Research

Stanisic

Legrand

Danjean

2015

SIGOPS Oper. Syst. Rev.

View full text Add to dashboard Cite

In this paper we address the question of developing a lightweight and effective workflow for conducting experimental research on modern parallel computer systems in a reproducible way. Our approach builds on two well-known tools (Git and Org-mode) and enables to address, at least partially, issues such as running experiments, provenance tracking, experimental setup reconstruction or replicable analysis. We have been using such a methodology for two years now and it enabled us to recently publish a fully reproducible article [12]. To fully demonstrate the effectiveness of our proposal, we have opened our two year laboratory notebook with all the attached experimental data. This notebook and the underlying Git revision control system enable to illustrate and to better understand the workflow we used.

show abstract

The DETER project: Advancing the science of cyber security experimentation and test

Cited by 71 publications

References 3 publications

Lessons learned from complex hands-on defence exercises in a cyber range

Lessons learned from complex hands-on defence exercises in a cyber range

On the Necessity of Establishing a National Cybersecurity Testbed

An Effective Git And Org-Mode Based Workflow For Reproducible Research

Contact Info

Product

Resources

About