Abstract:There is an increasing trend in cloud adoption of enterprise applications in, for example, manufacturing, healthcare, and finance. Such applications are routinely subject to targeted cyberattacks, which result in significant loss of sensitive data (e.g., due to data exfiltration in advanced persistent threats) or valuable utilities (e.g., due to resource the exfiltration of power in cryptojacking). There is a critical need to train highly skilled cybersecurity professionals, who are capable of defending against such targeted attacks. In this article, we present the design, development, and evaluation of the Mizzou Cyber Range, an online platform to learn basic/advanced cyber defense concepts and perform training exercises to engender the next-generation cybersecurity workforce. Mizzou Cyber Range features flexibility, scalability, portability, and extendability in delivering cyberattack/defense learning modules to students. We detail our "research-inspired learning" and "learn–apply–create" three-phase pedagogy methodologies in the development of four learning modules that include laboratory exercises and self-study activities using realistic cloud-based application testbeds. The learning modules allow students to gain skills in using latest technologies (e.g., elastic capacity provisioning, software-defined everything infrastructure) to implement sophisticated "attack defense by pretense" techniques. Students can also use the learning modules to understand the attacker–defender game in order to create disincentives (i.e., pretense initiation) that make the attacker's tasks more difficult, costly, time consuming, and uncertain. Lastly, we show the benefits of our Mizzou Cyber Range through the evaluation of student learning using auto-grading, rank assessments with peer standing- and monitoring of students' performance via feedback from prelab evaluation surveys and postlab technical assessments.

Cyber Range Research Based on Scientific Knowledge Map

Cyber Ranges：state-of-the-art and research challenges

Design and Research on Construction of Cyber Range

CyberGIS for data-intensive knowledge discovery

CyberGIS for Data-Intensive Knowledge Discovery.

A Bibliometric Study of Research Trends in Cross-Border Cybercrime

Research on the Knowledge Map of Combat Simulation Domain Based on Relational Database

Knowledge Mapping Analysis of Domestic Cyber Security Teaching Research(1997-2016)

Survey on cyberspace security

Towards Automated Cyber Range Design: Characterizing and Matching Demands to Supplies

A Review of Cyber-Ranges and Test-Beds: Current and Future Trends

Research of Cyberspace Countermeasure Based on Information Technology

Design of Cyberspace Security Talents Training System Based on Knowledge Graph

A Real-Time Correlation of Host-Level Events in Cyber Range Service for Smart Campus

Research on the Cyberspace Map and Its Conceptual Model

The Development Trend of Artificial Intelligence in Cyberspace Security: A Brief Survey

Research on Frontier and Trends of Science of Cybersecurity

Cyber Range for Research-Inspired Learning of “Attack Defense by Pretense” Principle and Practice

Identifying the Landscape and Trends in Cyberspace Research: from 1989 to 2016.

Seeking Foundations for the Science of Cyber Security

ICSrange: A Simulation-based Cyber Range Platform for Industrial Control Systems