• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>IEEE Global Engineering Education Conference >Attack Specification Language: Domain Specific Language for Dynamic Training in Cyber Range
【24h】

Attack Specification Language: Domain Specific Language for Dynamic Training in Cyber Range

机译：攻击规范语言：网络范围内动态培训的域特定语言

获取原文
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Cyber education development is a crucial issue considering the human resource and skill shortage in the current cybersecurity arena. A cyber range is a tried and tested hands-on training in cybersecurity education, providing threat simulation of various scenarios. However, the threat scenario development poses crucial challenges that hurt the learning process and trainee’s engagement in training. Firstly, the threat scenarios are static and have limited applicability. Secondly, due to the lack of proper representation of procedures and training scenarios used in attacks, it is hard to recognize redundant procedures. We propose an Attack Specific Language (ASL) based on the Mitre ATT&CK framework. It provides one representation for all threat scenarios. This language will give information about attack techniques in compact ways, which will streamline and automate the cyber range functions of threat and challenge execution. It will help identify and reduce redundancy. ASL will also provide training customization through dynamic threat execution, which will be trainee-aware and will consider the trainee’s performance while executing scenarios. It will provide trainees, better engagement, and training experience.
机译：Cyber​​教育发展是考虑到当前网络安全竞技场的人力资源和技能短缺的关键问题。网络范围是一项试验和测试的网络安全教育的动手培训，提供各种场景的威胁模拟。然而，威胁情景开发构成了损害学习过程和实习生参与培训的重要挑战。首先，威胁情景是静态的，适用性有限。其次，由于缺乏适当的攻击程序和培训方案的代表性，因此很难识别冗余程序。我们提出了一种基于斜切ATT＆CK框架的攻击特定语言（ASL）。它为所有威胁方案提供了一个表示。这种语言将以紧凑的方式提供有关攻击技术的信息，它将简化和自动化威胁和挑战执行的网络范围功能。它将有助于识别和减少冗余。 ASL还将通过动态威胁执行提供培训定制，这将是实习生感知的，并将在执行场景时考虑实习生的性能。它将提供学员，更好的参与和培训经验。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号