CyTrONE: Cyber Range Framework for Effective Cybersecurity Training

2019 Fiscal Year Final Research Report

• Project/Area Number: 17K00478
• Research Category: Grant-in-Aid for Scientific Research (C)
• Allocation Type: Multi-year Fund
• Section: 一般
• Research Field: Learning support system
• Research Institution: Japan Advanced Institute of Science and Technology
• Principal Investigator: BEURAN Razvan 北陸先端科学技術大学院大学, 先端科学技術研究科, 特任准教授 (40771788)
• Co-Investigator(Kenkyū-buntansha): 知念 賢一 北陸先端科学技術大学院大学, 先端科学技術研究科, 特任准教授 (20304157)
• Project Period (FY): 2017-04-01 – 2020-03-31
• Keywords: cybersecurity training / integrated framework

Outline of Final Research Achievements

We implemented a cybersecurity training framework named CyTrONE that makes it possible to easily conduct realistic hands-on training activities. The framework controls the overall training functionality, and uses additional modules for cybersecurity training support in the Moodle Learning Management System, to create training environments (cyber ranges) on demand, as well as manage training scenario progression.
We also created two sets of training content for CyTrONE: (i) Training questions aimed at students and other young learners with a total of 38 questions in five content categories; (ii) Training scenario inspired by information security testing and assessment techniques that is aimed at young professionals, with a total of 20 questions split into two levels.
The CyTrONE source code was released on GitHub (https://github.com/crond-jaist) and the training content was made public on our web site (https://www.jaist.ac.jp/misc/crond/achievements-en.html), our contribution to society.

Free Research Field

networking

Academic Significance and Societal Importance of the Research Achievements

CyTrONE フレームワークは、効果的なサイバーセキュリティ演習の重要な2つの問題を解決した：（1）演習コンテンツを簡単に変更および追加する機能 （2）演習環境を自動的に作成および管理する機能。この2つの機能は、演習コンテンツ用の専用テキスト形式の利用と、トレーニング環境用のサイバーレンジ生成システムを導入することで実現した。
演習フレームワークのソースコードと演習コンテンツが両方とも公開されたため、実質的に誰でも、いつでも、どこでもセキュリティ演習を実施でき、社会全体に貢献することができた。