Towards Automated Cyber Range Design: Characterizing and Matching Demands to Supplies

TL;DR

This paper introduces a framework to help organizations select suitable cyber range architectures by analyzing and matching their specific requirements with existing designs, facilitating more effective cyber range deployment.

Contribution

It presents a novel framework for specifying requirements, characterizing architectures, and matching them, based on analysis of 45 cyber range architectures.

Findings

Developed a comprehensive framework for cyber range design

Analyzed 45 architectures to identify key features

Provided a matching methodology for requirements and architectures

Abstract

Cyber ranges mimic real-world cyber environments and are in high demand. Before building their own cyber ranges, organizations need to deeply understand what construction supplies are available to them. A fundamental supply is the cyber range architecture, which prompts an important research question: Which cyber range architecture is most appropriate for an organization's requirements? To answer this question, we propose an innovative framework to specify cyber range requirements, characterize cyber range architectures (based on our analysis of 45 cyber range architectures), and match cyber range architectures to cyber range requirements.