URSID: Automatically Refining a Single Attack Scenario into Multiple Cyber Range Architectures - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2023

URSID: Automatically Refining a Single Attack Scenario into Multiple Cyber Range Architectures

Résumé

Contrary to intuition, insecure computer network architectures are valuable assets in IT security. Indeed, such architectures (referred to as cyber-ranges) are commonly used to train red teams and test security solutions, in particular ones related to supervision security. Unfortunately, the design and deployment of these cyber-ranges is costly, as they require designing an attack scenario from scratch and then implementing it in an architecture on a case-by-case basis, through manual choices of machines/users, OS versions, available services and configuration choices. This article presents URSID, a framework for automatic deployment of cyber-ranges based on the formal description of attack scenarios. The scenario is described at the technical attack level according to the MITRE nomenclature, refined into several variations (instances) at the procedural level and then deployed in virtual multiple architectures. URSID thus automates costly manual tasks and allows to have several instances of the same scenario on architectures with different OS, software or account configurations. URSID has been successfully tested in an academic cyber attack and defense training exercise.
Fichier principal
Vignette du fichier
main.pdf (626.77 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04317073 , version 1 (01-12-2023)

Licence

Paternité

Identifiants

  • HAL Id : hal-04317073 , version 1

Citer

Pierre-Victor Besson, Valérie Viet Triem Tong, Gilles Guette, Guillaume Piolle, Erwann Abgrall. URSID: Automatically Refining a Single Attack Scenario into Multiple Cyber Range Architectures. FPS 2023 - 16th International Symposium on Foundations & Practice of Security, Dec 2023, Bordeaux, France. pp.1-16. ⟨hal-04317073⟩
41 Consultations
15 Téléchargements

Partager

Gmail Facebook X LinkedIn More