Enhancing Industry 4.0 Cybersecurity Training through Cyber Range Platform
Manos Vasilakis, Konstantinos Κarampidis, Manolis G. Tampouratzis, Athanasios G. Malamos, Spyros Panagiotakis, Giorgos M. Papadourakis · 2024
Industry 4.0, the fourth industrial revolution, incorporates advanced technologies like IoT, big data, and AI but increases vulnerability to cyber-attacks. To mitigate these risks, hands-on training on realistic cybersecurity scenarios is necessary. Cyber-range platforms offer virtual training environments to simulate complex cyber threats, allowing security teams to develop and enhance skills safely. These platforms cover incident response, network security, threat intelligence, and digital forensics. Capture-The-Flag events also attract attention in cybersecurity. The study aims to develop a cyber-range platform using open-source tools such as CTFd to create realistic cybersecurity scenarios and propose an interactive industrial training solution. The development platform is an open-source framework called Naumachia. It is a lightweight, secure and containerized infrastructure for creating virtual machines. The training is organized through gamification, involving SQL injection, Snort Ruling, forensic analysis, and man-in-the-middle spoofing. The system is easily expandable and encourages trainees to test defenses and attacks safely. An anonymous survey evaluated the platform's knowledge, training, organization, educational material, and challenges.