Cybersecurity Exercise Apparatus for Dynamic Scenario Extraction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional cybersecurity exercises do not allow for individualized duration and type of cyberattack scenarios, making it difficult to accommodate the varying preferences and needs of participants, thereby limiting their effectiveness in training for defense against cyberattacks.
Innovation Solution
An information processing apparatus and method that allow participants to specify the execution duration and type of cybersecurity exercise, enabling the creation of customized scenarios by extracting relevant parts of a larger cyberattack scenario to fit the specified conditions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a fixed-duration cybersecurity exercise is provided to all participants, then the exercise can be standardized and easily managed, but it cannot accommodate individual participants' varying needs and preferences
Solution Approach 1:
The patent segments the cybersecurity exercise into multiple independent attack scenarios with different durations and complexities. Each scenario can be independently selected and executed, allowing participants to choose exercises that match their skill level and available time, thereby achieving adaptability without requiring a completely customizable system
Solution Approach 2:
The patent implements dynamic exercise configuration where the exercise parameters (duration, scenario type, complexity) can be adjusted based on participant input. The system dynamically selects and configures appropriate attack scenarios based on the specified execution duration, transforming a static fixed-duration exercise into a dynamic adaptable system
2Duration of action of moving object
If a complete cyberattack scenario is executed, then comprehensive training coverage is achieved, but the exercise duration becomes too long for participants with limited availability
Solution Approach 1:
The patent extracts and isolates specific attack scenarios from a comprehensive cyberattack framework. By selecting and executing only the relevant scenarios that fit within the specified time duration, the system provides focused training that maintains effectiveness while accommodating limited participant availability
Solution Approach 2:
The patent implements partial action by executing only the portion of the cyberattack scenario that fits within the specified duration. This allows participants to complete meaningful training exercises within their available time, rather than requiring full comprehensive scenarios
Data Source
AI summary
An information processing apparatus includes: an exercise condition acquisition unit that acquires an execution duration of a cybersecurity exercise specified by a participant of the cybersecurity exercise, as an exercise condition; and an attack operation creation unit that creates a series of attack operations to be executed in the cybersecurity exercise by creating a scenario of a cyberattack to be used in the cybersecurity exercise, and extracting a part of the created scenario that falls within the specified exercise duration.