Automating the Generation of Cyber Range Virtual Scenarios with VSDL.

摘要: A cyber range is an environment used for training security experts and testing attack defence tools procedures. Usually, a simulates one or more critical infrastructures that attacking (red) defending (blue) teams must compromise protect, respectively. The infrastructure can be physically assembled, but much convenient to rely on the Infrastructure as Service (IaaS) paradigm. Although some modern technologies support IaaS, design deployment of scenarios interest mostly manual operation. As consequence, it common practice have hosting few (sometimes only one), consolidated scenarios. However, reusing same scenario may significantly reduce effectiveness sessions. In this paper, we propose framework automating definition arbitrarily complex relies virtual description language (VSDL), i.e., domain-specific defining high-level features desired while hiding low-level details. semantics VSDL given in terms constraints satisfied by infrastructure. These are then submitted SMT solver checking satisfiability specification. If satisfiable, specification gives rise model automatically converted set scripts IaaS provider.