URSID: Automatically Refining a Single Attack Scenario into Multiple Cyber Range Architectures - UR1 - publications Maths-STIC Access content directly
Conference Papers Year : 2023

URSID: Automatically Refining a Single Attack Scenario into Multiple Cyber Range Architectures

Abstract

Contrary to intuition, insecure computer network architectures are valuable assets in IT security. Indeed, such architectures (referred to as cyber-ranges) are commonly used to train red teams and test security solutions, in particular ones related to supervision security. Unfortunately, the design and deployment of these cyber-ranges is costly, as they require designing an attack scenario from scratch and then implementing it in an architecture on a case-by-case basis, through manual choices of machines/users, OS versions, available services and configuration choices. This article presents URSID, a framework for automatic deployment of cyber-ranges based on the formal description of attack scenarios. The scenario is described at the technical attack level according to the MITRE nomenclature, refined into several variations (instances) at the procedural level and then deployed in virtual multiple architectures. URSID thus automates costly manual tasks and allows to have several instances of the same scenario on architectures with different OS, software or account configurations. URSID has been successfully tested in an academic cyber attack and defense training exercise.
Fichier principal
Vignette du fichier
main.pdf (626.77 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-04317073 , version 1 (01-12-2023)

Licence

Attribution

Identifiers

  • HAL Id : hal-04317073 , version 1

Cite

Pierre-Victor Besson, Valérie Viet Triem Tong, Gilles Guette, Guillaume Piolle, Erwann Abgrall. URSID: Automatically Refining a Single Attack Scenario into Multiple Cyber Range Architectures. FPS 2023 - 16th International Symposium on Foundations & Practice of Security, Dec 2023, Bordeaux, France. pp.1-16. ⟨hal-04317073⟩
24 View
11 Download

Share

Gmail Facebook X LinkedIn More