The THREAT-ARREST Cyber-Security Training Platform

Soultatos, Othonas; Fysarakis, Konstantinos; Spanoudakis, George; Koshutanski, Hristo; Damiani, Ernesto; Beckers, Kristian; Wortmann, Dirk; Bravos, George; Ioannidis, Menelaos

doi:10.1007/978-3-030-42051-2_14

Cited by 4 publications

(7 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Nowadays, a high variety of research and commercial platforms is available for cyber-security training for both individuals and organizations. A comparison of them with our method is presented in Table 1 and is detailed in [24]. Usually, most of the general-purpose e-learning platforms (e.g., Coursera (Mountain View, CA, USA, 2012-2020), Udacity (Mountain View, CA, USA, 2011-2020), edX (MA, USA, 2012-2020), etc.)…”

Section: Modern Cyber-security Training Platformsmentioning

confidence: 99%

“…THREAT-ARREST combines all modern training aspects of serious gaming [25,26], emulation and simulation in a concrete manner [27], and offers continuous security assurance and programme adaptation based on the trainee's performance and skills (Table 1). The platform [24] offers training on known and/or new advanced cyber-attack scenarios, taking different types of action against them, including: preparedness, detection and analysis, incident response, and post incident response actions. The THREAT-ARREST platform supports the use of security testing, monitoring and assessment tools at different layers in the implementation stack, including:…”

Section: Modern Cyber-security Training Platformsmentioning

confidence: 99%

“…The whole operation is defined under a methodology called "Cyber Threat and Training Preparation (CTTP) modelling" [24], which determines the learning goals of a training programme, the learning path of the trainee, as well as how to drive the on-demand instantiation of the virtual labs with the advance cyber-ranges features for these programmes and assess the trainee's actions automatically.…”

Section: Modern Cyber-security Training Platformsmentioning

confidence: 99%

“…In this subsection, we briefly introduce the CTTP-modelling features and how we establish a training programme. More details can be found in [24].…”

Section: The Building-blocks Of the Threat-arrest Cyber-security Trai...mentioning

confidence: 99%

“…The training is finished when the trainee has reached a specific level of understanding for the examined security properties that are included in the STRIDE analysis of this certification. The proposed method is deployed in the THREAT-ARREST cyber-ranges platform [24] as part of the overall trainee and training programme assessment.…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

Modern Aspects of Cyber-Security Training and Continuous Adaptation of Programmes to Trainees

et al. 2020

View full text Add to dashboard Cite

Nowadays, more-and-more cyber-security training is emerging as an essential process for the lifelong personnel education in organizations, especially for those which operate critical infrastructures. This is due to security breaches on popular services that become publicly known and raise people’s security awareness. Except from large organizations, small-to-medium enterprises and individuals need to keep their knowledge on the related topics up-to-date as a means to protect their business operation or to obtain professional skills. Therefore, the potential target-group may range from simple users, who require basic knowledge on the current threat landscape and how to operate the related defense mechanisms, to security experts, who require hands-on experience in responding to security incidents. This high diversity makes training and certification quite a challenging task. This study combines pedagogical practices and cyber-security modelling in an attempt to support dynamically adaptive training procedures. The training programme is initially tailored to the trainee’s needs, promoting the continuous adaptation to his/her performance afterwards. As the trainee accomplishes the basic evaluation tasks, the assessment starts involving more advanced features that demand a higher level of understanding. The overall method is integrated in a modern cyber-ranges platform, and a pilot training programme for smart shipping employees is presented.

show abstract

Section: Modern Cyber-security Training Platformsmentioning

confidence: 99%

Section: Modern Cyber-security Training Platformsmentioning

confidence: 99%

Section: Modern Cyber-security Training Platformsmentioning

confidence: 99%

“…In this subsection, we briefly introduce the CTTP-modelling features and how we establish a training programme. More details can be found in [24].…”

Section: The Building-blocks Of the Threat-arrest Cyber-security Trai...mentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations