Upload File

using test ranges for cyber security research · 2019. 7. 9. · using test ranges for cyber...

  • Home
  • Documents
  • Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University
28
Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University of Wellington eResearch 2016

Upload: others

Post on 17-Aug-2021

1 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

UsingTestRangesforCyberSecurityResearch

ByAbigailKoaySupervisedby:AaronChen&IanWelch

VictoriaUniversityofWellingtoneResearch 2016

Page 2: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

Overview

• CyberSecurity• Whatwedo?• Whatweencounter?• Whatwecanimprove

Page 3: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

LiveCyberAttacksDigitalMap

CyberAttacks,inrealtime

Page 4: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

TopCyberAttacks

NetworkIntrusion

Botnet

Denial ofService

Phishing/Spear

Phishing

Drive-byDownload

Page 5: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

TopCyberAttacks

NetworkIntrusion

Botnet

Denial ofService

Phishing/Spear

Phishing

Drive-byDownload

Page 6: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

DDoSontheRise- Worldwide

Page 7: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

DDoSAttackontheRise

Page 8: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

DDoSAttack,RealTime

LiveDDoSAttackMapLiveDDoSAttacksDigitalMap

DDoSAttacks,inrealtime

Page 9: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

Overview

• CyberSecurity• Whatwedo?• Whatweencounter?• Whatwecanimprove

Page 10: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

What’smyresearchabout?

MachineLearning

InformationEntropy

CorrelationAnalysis

DetectionSystem

DevelopingabetterDDoSdetectionsystemforlargescalenetwork

Page 11: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

HowdoIevaluatemysystem?

• Existingdatasets• MITLincolnLabDARPAIntrusionDetectionDataSets(1998-2000)• UniversityofNewBrunswickISCXIntrusionDetectionEvaluationDataSet(2012)

• Simulation/Emulations• Simulationsoftware• Testranges

Page 12: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

WhatareCyberSecurityTestRanges?

Asecurenetworkenvironmentforexperimenterstolaunchattackssafely.

Page 13: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

PublicallyAvailableTestRanges

Page 14: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

• >600researchersworldwide• ~200scientificpapers• >3800studentsreceivedtraining• >540high-capacitymulticoreservernodes(Berkeley,LosAngeles,Arlington)

Cyber-Defense Technology Experimental Research Laboratory

Page 15: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

NewProjectApplicationForm

Page 16: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University
Page 17: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

BeginanExperiment

Exampleof.nsfile

Page 18: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

TopologycreatedwithDeterlab

Objective:GeneratenetworktrafficenvironmentwithDDoSattack

Topology :Smallnetworkenvironmentwith3LAN.

Tools:HTTPSlowlorisBotnetgenerator(BoNeSi)D-ITG

Packetcapture:Wireshark

ExampleofExperiment

victims

Page 19: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

Whatisgood

• Scalabletopologies• Configurablebandwidthanddelaysfor

eachnetworklinks• Configurableroutings• Dedicatedphysicalhostforeachnode• OSimageselection• Abletoinstalltools

Page 20: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

Overview

• CyberSecurity• Whatwedo?• Whatweencounter?• Whatwecanimprove

Page 21: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

Challenges

• Resourceslimitation• Location/TimeDifference• Testbedarchitectureunfamiliarity• Federatedmaintenance

Page 22: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

Overview

• CyberSecurity• Whatwedo?• Whatweencounter?• Whatwecanimprove

Page 23: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

Wouldifbebetterifwecanhaveasimilar

facilityinNZ?

Page 24: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

CurrentcybersecuritylabsinNZ

CyberSecurityResearchCentre(Unitec)

CyberSecurityResearchersofWaikato(CROW)Laboratory

ResearchFacility

Page 25: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

ResearchFacility

Testold/newcyberattacks

CaptureTraffic

SDN

Shareresources

Repeatexisting

experiments

education

fostercollaborati

on

shareexpertise

Woulditbebettertohave..

Page 26: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

Questions?

Page 27: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

Thankyou.--End--

Page 28: Using Test Ranges for Cyber Security Research · 2019. 7. 9. · Using Test Ranges for Cyber Security Research By Abigail Koay Supervised by: Aaron Chen & Ian Welch Victoria University

Experiential Learning via Cyber Ranges Jim Smith · 2 1.How do we increase the pipeline of cybersecurity talent? 2.How does experiential learning via Cyber Ranges support this objective?

NYS Cyber Security Toolkit - New York State Office of ...(WordPress, Joomla, Drupal, etc.) Vulnerability Management Program Send domains, IP ranges, and contact info to: [email protected]

DR KOAY probability

Ranges, ranges everywhere (Oracle SQL)

2019 DoD Cyber Test and Training Ranges Executive Agents ... · • DoDD 5101.19E DoD Executive Agents for DoD Cyber Test and Cyber Training Ranges First Biennial Integrated Plan

Plausibility Ranges for Population Estimates Focusing on ranges for children

Blatter Ranges

Bukit Mertajam Famous Duck Egg Char Koay Teow

Federation of Cyber Ranges - ut

Expanding Network Testing with Virtual Cyber Rangesitea.org/images/pdf/conferences/2015_Symposium/Presentations/Dyer Track 1.pdfExpanding Network Testing with Virtual Cyber Ranges

Bulford Ranges

MIMI KOAY - Mumsgathermumsgather.com/wp-content/uploads/2014/11/Sample-Chapter-Banana... · MIMI KOAY ii Banana Mom’s Guide To ... 4 Eeny, Meeny, Miny, Moe, SJK, SJKC, Pte, Int’L

Pacific Mountain System Coast Ranges. North Coastal Ranges South Coastal Ranges

GROUP IT SOLUTIONS - ACW Distribution€¦ · improve their overall security posture. Used by companies and governments around the world, cyber ranges offer hyper-realistic simulated

Koay raua reat 21 :1 o f T r au m & a l r reatment · 1/31/2019  · Ivan Koay* Silverdale Medical Centre, Auckland, New Zealand the part of majority of the medical fraternity to

evodia ranges

Using Cyber Ranges for Cybersecurity Education David Raymond · Virginia Cyber Range Approach • Hosted in the cloud • Web portal for access to cyber range content • Role-based

Expanding Network Testing with Virtual Cyber Ranges...•Demand for Cyber testing continues to outstrip supply. •Different and competing demand signals for cyber ranges e.g. testing,

Summer Internship MEL KOAY. Hymans Robertson Independent pensions consultancy Four main business areas: ◦Risk Modelling Consulting (RMC) ◦Actuarial

Prepared by: KOAY ANNIE 091190404 MARINA 091190502 SITI ATIKAH 091191308 NORSRI KURNIATI 091191028 MOHD FARID 091190627

Cyber Range Solution - VMware · Cyber Ranges designed and built with a core platform of VMware Cloud Foundation® and VMware Cloud on AWS® can create the necessary Cyber Range theaters

Koay raua reat 21 :1 o f T r au m & a l r reatment€¦ · aa ea a oe ae oa 267222 taton ®Koay I 21 se of heroplastic plint in the Treatent of rist Fractures: A Retrospective Cohort

Pay pay koay

Cyber-Crime, Cyber- Warfare, Cyber- Conflict › wp-content › uploads › cybertalk … · What is Cyber-crime? Cyber-warfare? “Cyber” –Computers and machines Cyber-crime

Kitchen Ranges

INK RANGES • COLOUR RANGES • ADDITIVES

Building Cyber-Physical Energy Systems · ranges from low-level embedded and real time system challenges, ... protecting information in a world of ubiquitous connectivity. A ... outlook

European Defence Agency Capabilities Directorate...European Defence Agency Capabilities Directorate COMMON STAFF TARGET FOR MILITARY COOPERATION ON CYBER RANGES IN THE EUROPEAN UNION

Cyber Ranges on AWS using Ravello

Cyber Security, Cyber Intelligence & Cyber Investigation

Advanced Tools for Cyber Ranges

Cyber Ranges: The (R)evolution in Cybersecurity Training

mypenang.gov.myHo Ping Cafe, 21 1 Jalan Penang, George Town Siam Road Char Koay Teow 82 Jalan Siam. George Tawn [Closed Sun & Mon) Mei Le Hwa Duck Egg Char Koay Teow Mei Le Hwa Restaurant,

European Defence Agency Capabilities Directorateeda.europa.eu/docs/default-source/procurement/annex-a---cyber-ranges-cst.pdf · The training need analysis, that defines the target

Automated Cyber Ranges: Design Features, Architectures