The Role of a Cyber Test Range in Stress Testing the Security of

THE ROLE OF A CYBER TEST RANGE IN STRESS
TESTING THE SECURITY OF COMPUTER SYSTEMS
AND DEVELOPING NEW CYBER DEFENCES
WHAT CAN YOU DO ON A CYBER TEST
RANGE?
WHAT IS A CYBER TEST RANGE?
• Replicate network attacks and defence responses • A safe environment for assessing the security of computer systems and addressing a wide range of cyber questions
• Reveal and evaluate network vulnerabilities
• Proof of concept testing
• Replicates the look and feel of real networks through accurate emulation
• De-risk capability roll-outs and networktransitions
• Reveals network vulnerabilities by subjecting models to intrusive stress testing (cyber attack)
• Evaluate network security components
• Evaluate network security policies & procedures
• Adversarial team scenario training
• Link with other cyber test facilities
PROOF OF CONCEPT TESTING FOR NOVEL
CYBER TOOLS DEVELOPMENT
Sensors
Network Layout
Svc Mgt
Toolset
ARCHITECTURE EXAMPLE
CYBER TEST RANGE
Alerts
Tool A
Visualisations
CND CLOUD
Business Processes
Other
Seamless
interaction
Tool A
Visualisation
Architecture
Sy Ops
Staff
Tool B
Visualisations
Other CND Applications
UK CYBER TEST RANGE
NOVEL TEST ENVIRONMENT AND
APPROACH
GOVERNMENT & COMMERCIAL
UK & INTERNATIONAL
PRIMARY BENEFITS OF USING A CYBER
TEST RANGE
2011 RANGE-BASED R&D
• Test environment for improving resilience of defence of UK critical national infrastructure
• No risk of damage to live network
• No disruption to live operation
• Test environment for development of novel cyber defence tools
• Understand security status of computer systems
• Test environment for CND cloud demonstrator
• Understand technical and financial implications before committing to a security solution
• Test environment for developing trustworthy digital systems
• Metrics based results to support business case
Chris Durbin
Head of Cyber Security
[email protected]
Northrop Grumman Mission System Europe Ltd
Annual Symposium 2011 - IAAC Sponsors