Home > Explore Content > All Issues > Article View
Automated Cyber Threat Emulation Based on ATT&CK for Cyber Security Training
Journal of The Korea Society of Computer and Information
Abbr :
JKSCI
2020, 25(9), pp.71-80
Publisher : The Korean Society Of Computer And Information
Research Area : Computer Science
2020, 25(9), pp.71-80
Publisher : The Korean Society Of Computer And Information
Research Area : Computer Science
-
As societies become hyperconnected, we need more cyber security experts. To this end, in this paper, based on the analysis results of the real world cyber attacks and the MITRE ATT&CK framework, we developed CyTEA that can model cyber threats and generate simulated cyber threats in a cyber security training system. In order to confirm whether the simulated cyber threat has the effectiveness of the actual cyber threat level, the simulation level was examined based on procedural, environmental, and consequential similarities. in addition, it was confirmed that the actual defense training using cyber simulation threats is the same as the expected defense training when using real cyber threats in the cyber security training system.
177 Viewed
Print this page
Download PDF