AERAS · A CybEr range tRaining platform for medicAl organisations and systems Security

A CybEr range tRaining platform for medicAl organisations and systems Security

The AERAS project aims at developing a realistic and rapidly adjustable cyber range platform for systems and organisations in the critical healthcare sector, to effectively prepare stakeholders with different types of responsibility and levels of expertise in defending high-risk, critical cyber-systems and organizations against advanced, known and new cyber-attacks, and reduce their security risks. The platform will be a virtual cyberwarfare solution enabling the simulation of the operation and effects of security controls and offering hands-on training on their development, assessment, use and management. The platform will be based on an evidence-based approach where virtual cyberwarfare and simulations are configured according to evidence regarding: (i) the occurrence of cyber threats, and (ii) the effectiveness of the operation of the internal and external system defence mechanisms. Evidence will be collected by multi- faceted real- time monitoring and assessed according to Cyber Range Security Assurance (CRSA) models specifying potential cyber-attacks, the security mechanisms used against them, and the methods for assessing their effectiveness. The AERAS solution will be delivered at TRL-7 and validated through two different pilots in the healthcare sector. To address the above, AERAS will pursue the following objectives: 1) Develop Cyber Range Security Assurance models (CRSA models) to drive the generation of Cyber Range Simulation and Training (CRST) programmes. 2) Develop novel hybrid cyber security risk analysis models, which combine traditional static cyber security risk analysis principles and standards with continuous risk estimates. 3) Develop mechanisms to support the adaptation of cyber range simulation and training programmes, via feedback received from multiple sources, including multi-layer system, trainee and programme performance monitoring, and CSLAs monitoring. 4) Develop capabilities required for the delivery of effective cyber training, namely emulation, simulation, security assurance assessment, and visualisation capabilities 5) Integrate capabilities developed under Objectives 1-4 into a common platform that delivers realistic and highly adjustable cyber training, offering hands-on experience against cyber-attacks. 6) To ensure the dissemination and communication of the project’s results and the uptake of the AERAS innovation to organisations in critical domains, and cyber security stakeholders.

Data: CORDIS, © European Union