关键词: |
First responders, Cyberattacks, Scenarios, Training, Test beds, Human machine interface, Standards, Cyber exercises, Critical infrastructure protection, Physical processes simulation, Readiness, Y-box, Ics (industrial control systems), Ics cyber professionals, Cyber first responders, Hmi (human machine interface), Es (engineering stations), Plc (programmable logic controllers) |
摘要: |
First responders go through rigorous training and evaluation to ensure they are adequately prepared for an emergency. From a cyber security standpoint, however, this same set of criteria and rigor is severely lacking. This research provides a framework for evaluating the readiness of cyber first responders responsible for critical infrastructure protection. The framework demonstrates the development of evaluation environment, criteria and scenarios that are modeled from NFPA1410 standards concept that is used for assessing the readiness of firefighter first responders. The utility of framework is exhibited during a military cyber training exercise and demonstrates the ability to evaluate the readiness of cyber first responders when responding to the cyber-based attacks in the scenarios. In addition, the results and analysis from the exercise provide a context to develop a physical processes simulation tool, called Y-Box. The Y-Box creates more accessible, representational, realistic and evaluation-friendly environment to enhance the framework. The Y-Box demonstrates its successful application through the simulation of the first two stages in a wastewater treatment plant. |