Cyber defence exercises - how to make it cool?

Presented at Kiwicon 2038AD: The Dystopic Future is Now (2018), Nov. 17, 2018, 9:30 a.m. (30 minutes).

Technical cyber defence exercises are typically conducted in a Cyber Range, hosting hundreds of servers, workstations, network devices, etc.

Usually the setup is replicating a typical office environment with mailservers, fileservers, webservers, workstations and other typical business IT infrastructure.

Soon this type of exercise might get boring and people might lose the motivation to participate year by year.

What about making the exercise environment bit more fancy by integrating some special systems like Power Grid, Mobile Networks, drones, cars etc?

What are the main challenges setting up these systems?

What additional skills it would train?

What are the attack vectors?

How to visualise these systems to the wider audiences?

How to keep balance between the learning curve and showcase.

How to scale special systems and how to avoid just toys.

NATO CCDCOE has conducted the largest technical international life fire cyber defence exercise Locked Shield for almost 10 years whereby in recent years several dedicated special systems have given a totally new look and feel to the exercise.

Presenters:

• Raimo Peterson
  Raimo Peterson is Chief of the Technology Branch at the NATO Cooperative Cyber Defence Centre of Excellence (NATO CCD COE). Before his current assignment, he held diverse IT security management, leadership and expert positions for Siemens in Germany, South-Africa and Estonia. He has worked on large international IT security projects for the telecommunication industry and for the public sector. In his current position, Raimo leads a group of researchers focusing on technical aspects of cyber defence, especially on monitoring, penetration testing, malware analysis, digital forensics and inductrial control systems. Raimo holds a Diploma in Telecommunications from the Tallinn Technical University. Besides the leadership tasks, in current position Raimo Peterson has been driving the development of the critical infrastructure systems and integrating them into the cyber range and cyber defence exercises

Similar Presentations:

• DEF CON 18 (2010) / Live Fire Exercise: Baltic Cyber Shield 2010
• ToorCon San Diego 19 (2017) / Cyber Wargames: Table Top Exercises