Automating Cyber Attacks in Cyber Ranges

Moderni informacijski sustavi podložni su napadima putem kibernetičkog prostora te su tvrtke svjesne te činjenice i za nju se odgovarajuće pripremaju. Jedna bitna komponenta tih priprema je treniranje ljudi koji održavaju takve sustave da prepoznaju napade te da ih na odgovarajući način uklone. Izazov je što uvježbavanje na stvarnim sustavima nije dozvoljeno budući da im se tijekom vježbe može naštetiti, a istovremeno, napadi nisu tako česti. Iz tog razloga teži se kreiranju simuliranih okolina unutar koji se provode vježbe. Takve vježbe primarno služe za uvježbavanje tehničkih sposobnosti te se nazivaju kibernetički poligoni (engl. cyber range). Bitna komponenta kibernetičkih poligona je modul za automatizaciju napada, odnosno emulaciju crvenih timova, jer je dosta teško naći kompetentne ljude za tu zadaću. Ovaj rad istražuje metode automatizacije, odnosno emulacije napada te kako se implementiraju na postojećim kibernetičkim poligonima.Modern information systems are susceptible of cyber attacks, and companies are aware of it and try to prepare themselves accordingly. A major component in these preparations is the training of experts, who maintain those system to detect and respond to such attacks. It is prohibited to conduct such training on the production environment, in order to avoid causing serious damage to the system, which, in addition to these attacks not being very common, present a challenge. That's why it is desirable to create a simulated environments to conduct training drills. Such environments, combined which training drills, are called cyber ranges. A major factor in these environments is the conduction of computer attacks during drills. Searching for qualified personell for this task can be time-consuming, exhausting and quite expensive, so it's beneficiary to automate the process of performing computer attacks. This paper researches automation methods, and how they are implemented in the context of a cyber range