• 研究課題をさがす
  • 研究者をさがす
  • KAKENの使い方
  1. 課題ページに戻る

2018 年度 実施状況報告書

CyTrONE: Cyber Range Framework for Effective Cybersecurity Training

研究課題

研究課題/領域番号 17K00478
研究機関北陸先端科学技術大学院大学

研究代表者

BEURAN Razvan  北陸先端科学技術大学院大学, 先端科学技術研究科, 特任准教授 (40771788)

研究分担者 知念 賢一  北陸先端科学技術大学院大学, 先端科学技術研究科, 特任准教授 (20304157)
研究期間 (年度) 2017-04-01 – 2020-03-31
キーワードcybersecurity training / integrated framework
研究実績の概要

According to the submitted activity plan, in FY2018 we had two main research directions:
1. We continued the integration of the CyTrONE framework with the Moodle Learning Management System (LMS) via the module CyLMS, integration that was started earlier than planed in FY2017. The integration is now completed and we are currently preparing a journal paper on the topic.
2. We began focusing on training content development, and we are in the process of releasing a new training content set that uses the style of Capture The Flag (CTF) competitions, which are very popular for security training activities. Related to training content, the initially planned way to retrieve automatically old packages with vulnerabilities could not be realized, therefore we moved to an alternative approach that enables dynamic training sessions, as it is described below.

In addition to the planned items above, we have also began implementing a supplementary module, named CyPROM, that was not included in the initial plan. The role of this module is to dynamically manage scenario progression, so that more realistic attack-defense scenarios can be created, for instance with attacks conducted automatically while trainees defend their system. A paper on this topic has already been accepted for publication, and the module itself will be integrated with CyTrONE in FY2019.

現在までの達成度 (区分)
現在までの達成度 (区分)

2: おおむね順調に進展している

理由

The training framework CyTrONE is now almost fully functional, with most of the modules and features having been implemented and tested. We have also conducted several functionality evaluations. While no significant issues were detected so far, feedback from the evaluators will be used for bug fixing and future improvement purposes.

Overall research progress is relatively smooth, with a new module being implemented to support dynamic training activities. Although the amount of new training content that was created until now is somewhat less than planned, content development will continue in FY2019 to fill this gap.

今後の研究の推進方策

For FY2019, which is the last year of the project, the activity will proceed along three main directions:
1. Documentation will be reviewed and user support will be provided to all parties interested in using our framework. In this context, training content development will also continue as per the requirements of various types of trainees.
2. User trials will be conducted with the final version of the framework and methods of inclusion in existing training programs will be assessed. For this purpose, the newly developed scenario progression module, CyPROM, will also be integrated with the overall framework.
3. Project promotion will continue, with a planned demo at the CODE BLUE 2019 conference, and presentations at the USENIX Security '19 conference. This will allow us to target both domestic and international audiences to publicize our project as widely as possible.

次年度使用額が生じた理由

Some travel expense budget remained unused since we did not attend in FY2018 any conference overseas using the KAKENHI budget. However, we plan to attend one such conference in FY2019, and the unused budget will be used together with this year's travel budget to pay for the associated costs.

備考

The GitHub website of the Cyber Range Organization and Design (CROND) chair, where our framework's source code is being made publicly available.

  • 研究成果

    (7件)

すべて 2019 2018 その他

すべて 雑誌論文 (1件) (うち査読あり 1件) 学会発表 (5件) (うち国際学会 2件、 招待講演 1件) 備考 (1件)

  • [雑誌論文] Integrated framework for hands-on cybersecurity training: CyTrONE2018

    • 著者名/発表者名
      Beuran Razvan、Tang Dat、Pham Cuong、Chinen Ken-ichi、Tan Yasuo、Shinoda Yoichi
    • 雑誌名

      Computers & Security

      巻: 78 ページ: 43~59

    • DOI

      10.1016/j.cose.2018.06.001

    • 査読あり
  • [学会発表] クイズ型セキュリティ演習に お ける正解の多様化 --- CyTrONEにおける実例 ---2019

    • 著者名/発表者名
      Chinen Ken-ichi
    • 学会等名
      電子情報通信学会
  • [学会発表] サイバー演習の防御演習時におけるシナリオ進行の自動化システムの提案2018

    • 著者名/発表者名
      Inoue Takuya
    • 学会等名
      Internet Conference (IC 2018)
  • [学会発表] Improving Cybersecurity Resilience via Education and Training2018

    • 著者名/発表者名
      Beuran Razvan
    • 学会等名
      Cyber Resilience Conference (CRC 2018)
    • 国際学会 / 招待講演
  • [学会発表] On Designing a Cybersecurity Educational Program for Higher Education2018

    • 著者名/発表者名
      Kim Eunyoung
    • 学会等名
      International Conference on Education Technology and Computers (ICETC 2018)
    • 国際学会
  • [学会発表] 情報セキュリティアウェアネス向上のための意思決定トレーニング環境の提案2018

    • 著者名/発表者名
      Hasegawa Shinobu
    • 学会等名
      教育システム情報学会
  • [備考] Cyber Range Organization and Design site on GitHub

    • URL

      https://github.com/crond-jaist

URL: 

公開日: 2019-12-27  

サービス概要 検索マニュアル よくある質問 お知らせ 利用規程 科研費による研究の帰属

Powered by NII kakenhi