IRIS Institutional Research Information System - AIR Archivio Istituzionale della Ricerca
IRIS è il sistema di gestione integrata dei dati della ricerca (persone, progetti, pubblicazioni, attività) adottato dall'Università degli Studi di Milano.
AIR nasce in UNIMI nel 2006 con lo scopo di raccogliere, documentare e conservare le informazioni sulla produzione scientifica dell'Università degli Studi di Milano e costituisce di fatto l'Anagrafe della ricerca dell'Ateneo.
EnglishCyber ranges are virtual environments used in several contexts to enhance the awareness and preparedness of users to cybersecurity threats. Effectiveness of cyber ranges strongly depends on how much realistic are the training scenarios provided to trainees and on an efficient mechanism to monitor and evaluate trainees’ activities. In the context of the emulation environment of the THREAT-ARREST cyber range platform, in this paper we present a preliminary design of our work in progress towards the definition of a model-driven approach to monitor and evaluate the trainee performance. We enhance the platform emulation environment with an agent-based system that checks trainees’ behavior in order to collect all the trainee’s actions performed while executing a training exercise. Furthermore, we propose a modular taxonomy of the actions that can be exploited for the description of the trainee’s expected behavior in terms of the expected trace, i.e., the sequence of actions that is required for the correct execution of an exercise. We model the expected and actual trainee activities in terms of finite state machines, then we apply an existing algorithm for graph matching to score the trainee performance in terms of graph distance.
Towards the Monitoring and Evaluation of Trainees’ Activities in Cyber Ranges / C. Braghin, S. Cimato, E. Damiani, F. Frati, E. Riccobene, S. Astaneh (LECTURE NOTES IN ARTIFICIAL INTELLIGENCE). - In: Model-driven Simulation and Training Environments for Cybersecurity / [a cura di] G. Hatzivasilis, S. Ioannidis. - [s.l] : Springer, 2020. - ISBN 9783030624323. - pp. 79-91 (( Intervento presentato al 2. convegno MSTEC tenutosi a Guildford nel 2020.
| Titolo: | Towards the Monitoring and Evaluation of Trainees’ Activities in Cyber Ranges |
| Autori: | |
| Parole Chiave: | Cyber ranges; Emulation frameworks; Monitoring frameworks |
| Settore Scientifico Disciplinare: | Settore INF/01 - Informatica |
| Progetto: | THREAT-ARREST Cyber Security Threats and Threat Actors Training - Assurance Driven Multi-Layer, end-to-end Simulation and Training (THREAT-ARREST) |
| Data di pubblicazione: | 2020 |
| Digital Object Identifier (DOI): | http://dx.doi.org/10.1007/978-3-030-62433-0_5 |
| Tipologia: | Book Part (author) |
| Appare nelle tipologie: | 03 - Contributo in volume |
File in questo prodotto:
| File | Descrizione | Tipologia | Licenza | |
|---|---|---|---|---|
| MSTEC2020.pdf | Pre-print (manoscritto inviato all'editore) | Administrator Richiedi una copia | ||
| Braghin2020_Chapter_TowardsTheMonitoringAndEvaluat.pdf | Publisher's version/PDF | Administrator Richiedi una copia |
Copyright © 2021