Archive, Volume 1: conference talks and papers on security and risk, 2010 to 2018. Zola 2018-06-27T00:00:00+00:00 https://blog.itys.net/vol1/tags/cyber-ranges/atom.xml 2018-06-27T00:00:00+00:00 2018-06-27T00:00:00+00:00 Unknown https://blog.itys.net/vol1/posts/cyber-ranges-sans-with-script/ <h2 id="summary">Summary</h2> <p>Matthew J. Harmons SANS @ Night presentation Emerging Cyber Ranges: Competition to Compliance, delivered on June 27, 2018, explores how purpose-built environments can accelerate offensive and defensive security practice, foster competitive e-sports, and underpin formal compliance and product validation efforts .</p> <h2 id="cyber-range">Cyber Range</h2> <p>First, Harmon defines a cyber range as any isolated, refreshable networkvirtual or physicalused to detonate malware, test exploits, or simulate advanced threats. He surveys existing platforms from SANS NetWars (both virtual challenges and the physical CyberCity model) to JYVSECTECs SCADA-focused ranges and the Michigan Cyber Range, and even the DARPA-led National Cyber Range. Each example illustrates how controlled environments enable realistic training, product proof-of-concepts, and large-scale team competitions without risking production assets .</p> <h2 id="principles-to-proof-of-concept">Principles to Proof of Concept</h2> <p>Second, the talk shifts to design principles and hands-on constructs. Harmon outlines key requirementscontainment, auto-scaling, encrypted peer tunnels, explicit authorization, rapid restoration, and portabilityand presents a Raspberry Pi-based proof-of-concept leveraging OPNsense, HardenedBSD routing, iPXE booting, and YubiKey-backed hardware security modules. He also covers adversary simulation using MITRE CALDERA, Uber Metta, and Netflixs Simian Army, and shows how cyber ranges can be woven into compliance lifecyclesfrom requirements gathering through vendor evaluation, baseline verification, and resilience testingtransforming these playgrounds into governance-grade testbeds .</p> <h2 id="presentation">Presentation</h2> <p><a href="/attachments/58296_2018-06-27_Cyber_Ranges-SANS_with_Script.pdf">Cyber Ranges, Script</a></p>