SOLUTION OVERVIEW | 1 SOLUTION OVERVIEW Cyber Range Solution Training and simulation environments at scale, breadth and speed to bolster cyber posture and capabilities Agility, Security, and Scale and the Realm of Cyber Learning High profile cyber-attacks are on the rise across all industries. There is a growing need for institutions and organizations to be prepared to defend against attacks. The cyber security industry has responded with a series of solutions and methodologies to combat these specific threat vectors. All entities must continuously teach and train their IT security professionals to develop and maintain domain expertise across new solutions, new breach techniques and appropriate incident responses. Cyber Ranges fulfill these dynamic cyber security and training requirements. The Cyber Range solution provides a dynamic, secure, and scalable platform supporting multiple use cases for Cyber Learning and a proactive Cybersecurity capability. Use cases can span static learning, to dynamic Cyber exercises, to Industry Control System integration, and full-scale environment replication. What is a Cyber Range? Cyber Range platforms provide critical training and simulation arenas that mirror real world threats and allow cyber security professionals to develop and hone their skills. Much like a flight simulator for pilots, where the participant can face flight scenarios with varying levels of difficulty and complexity, a Cyber Range helps organizations automate and simulate the entire incident response process. The goal of Cyber Ranges to the prepare IT Professionals, Security Engineers, and Security Operations Centers (SOC) to proactively detect, analyze, and respond to the evolving cybersecurity threats and incidents through real-world experiences. Cyber security breaches are now a question of ‘when’, not ‘if.’ VMware can help provide a platform for organizations to build out or evolve their Cyber Range capability. KEY HIGHLIGHTS • Address the holistic nature of security threats – people, process and technology • Learn techniques and skills to mitigate threats before, during and after attacks • Leverage real-world cyberwar exercises and incident response practices • Highly secure and segmented platform allows hosting of malicious code and network activity in simulated environment • Integration of Cyber Range with Programmable Logical Controllers and Industry Control System simulations
Transcript
S O L U T I O N O V E R V I E W | 1
S O L U T I O N O V E R V I E W
Cyber Range Solution Training and simulation environments at scale, breadth and speed to bolster cyber posture and capabilities
Agility, Security, and Scale and the Realm of Cyber Learning High profile cyber-attacks are on the rise across all industries. There is a growing need for institutions and organizations to be prepared to defend against attacks. The cyber security industry has responded with a series of solutions and methodologies to combat these specific threat vectors.
All entities must continuously teach and train their IT security professionals to develop and maintain domain expertise across new solutions, new breach techniques and appropriate incident responses. Cyber Ranges fulfill these dynamic cyber security and training requirements.
The Cyber Range solution provides a dynamic, secure, and scalable platform supporting multiple use cases for Cyber Learning and a proactive Cybersecurity capability. Use cases can span static learning, to dynamic Cyber exercises, to Industry Control System integration, and full-scale environment replication.
What is a Cyber Range? Cyber Range platforms provide critical training and simulation arenas that mirror real world threats and allow cyber security professionals to develop and hone their skills. Much like a flight simulator for pilots, where the participant can face flight scenarios with varying levels of difficulty and complexity, a Cyber Range helps organizations automate and simulate the entire incident response process.
The goal of Cyber Ranges to the prepare IT Professionals, Security Engineers, and Security Operations Centers (SOC) to proactively detect, analyze, and respond to the evolving cybersecurity threats and incidents through real-world experiences. Cyber security breaches are now a question of ‘when’, not ‘if.’ VMware can help provide a platform for organizations to build out or evolve their Cyber Range capability.
KEY HIGHLIGHTS • Address the holistic nature of
security threats – people, process and technology
• Learn techniques and skills to mitigate threats before, during and after attacks
• Leverage real-world cyberwar exercises and incident response practices
• Highly secure and segmented platform allows hosting of malicious code and network activity in simulated environment
• Integration of Cyber Range with Programmable Logical Controllers and Industry Control System simulations
VMware Digital Learning PlatformTM - Cyber Range Solution
The Value of a Cyber Range Capability The VMware Cyber Range Solution brings value in its purpose-built approach to unifying content and a technology platform. The solution provides flexibility to serve a multitude of Cyber Learning use cases. These use cases span traditional hands-on learning, event and exercise scenarios (e.g., capture-the-flag, red-team-blue-team, and hackathon), and simulated production environments for testing and exploration.
The solution’s content is delivered through GRIMM’s Cyber Maturity Builder (CMB) offering (http://www.cybermaturitybuilder.com). Content has been developed to train, hone, and assess cybersecurity skill levels to improve organizational cyber maturity. The CMB offers a full range of cybersecurity challenges that are all underpinned by the OWASP Top 10 to the SANS Institute Top 25, as well as CMMC alignment.
From a platform perspective, the Cyber Range is built on VMware’s Software-Defined Data Center (SDDC) porfolio. The platform delivers value in its ability to build-up-tear-down compute environments with automation and self-service capabilities for Range participants. The result is a dynamic, flexible, and on-demand platform for cyber events. In addition, VMware enables simulation of enterprise networks to scale to support multi-site environments, and allows for multiple ingress/egress points creating complexity within a simulation. Along with VMware’s partnership with GRIMM’s content, organizations can build their own lab environments for cyber exercises, testing, or other associated use cases.
Showcasing the Cyber Range The Cyber Range Solution is deployed on the VLP hosted cloud and serves as the platform for several customer Capture-the-Flag and Cybergaming Events. As the Range’s cloud-based solution is an on-demand capability, there is flexibility to demonstrate its capabilities for any and all.
In partnership with World Wide Technology (WWT), the Range Solution has been deployed within WWT’s Advanced Technology Center (ATC). The ATC is a collection of physical labs that are virtualized to create a collaborative ecosystem to design, build, educate and deploy innovative technology products and integrated architectural solutions to achieve transformational digital business outcomes.
Partnership Value GRIMM is a forward-looking cybersecurity organization led by industry experts. Our practice demonstrates the impact of security risks and provides the technical solutions to address top risks. Our expertise is built on operational experience solving advanced cybersecurity problems.
VMware software forms a digital foundation that powers applications, services, and experiences transforming the world. Spanning compute, cloud, networking and security, and digital workspace, our software unlocks new possibilities by streamlining the journey to digital business with value.
WWT has grown to become a top technology solution provider to more than 50 of the FORTUNE 100. The value WWT can provide is best demonstrated in their Advanced Technology Center (ATC), new B2B Innovation Platform and Integration Centers around the globe.
The value of the Cyber Range solution is bolstered through combining content, platform, and value-add services through its diverse partnership capabilities
DEPLOY ANYWHERE • Flexible cloud delivery model
• Automated provisioning of Cyber Exercise infrastructure-as-code blueprints
• Tear-down-build-up capabilities for multiple cyber exercises
