Virtual Air Gap for Secure Cyber Range Console Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in controlling access to cyber range virtual environments while maintaining internal network security, as individuals with access to these environments may pose a threat to network security, making it difficult to balance sufficient access with utmost security measures.
Innovation Solution
A system comprising a user device, a secure console host platform, and a virtual air gap, where user authentication occurs within the virtual air gap, physically separate from the user device and cyber-range host platform, with a broker authenticating and authorizing connections between the secure console host platform and the cyber-range host platform, ensuring secure access through a multi-stage virtual air gap and the use of a virtual kill switch to prevent malware spread.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If individuals are granted access to the cyber range virtual environment, then sufficient access for simulation and testing is improved, but internal network security deteriorates
Solution Approach 1:
A virtual air gap computing platform is introduced as an intermediary system between the cyber range virtual environment and the internal network. This platform includes a virtual machine that creates an isolated computing environment, allowing users to access the cyber range for simulation and testing while preventing direct access to the internal network. The virtual air gap acts as a mediator that enables useful access while blocking harmful connections.
Solution Approach 2:
The system segments the computing environment into distinct isolated zones: the cyber range virtual environment, the virtual air gap platform, and the internal network. By dividing the system into separate segments with controlled interfaces, users can access the cyber range portion while the virtual air gap segmentation prevents propagation of threats to the internal network segment.
2Productivity
If direct access is provided to the cyber range, then access efficiency is improved, but the risk of malware spread and unauthorized access increases
Solution Approach 1:
The virtual air gap platform serves as an intermediary that maintains efficient access to the cyber range while blocking malware propagation. The virtual machine creates a controlled interface that allows legitimate cyber range operations to proceed efficiently while preventing malicious code from reaching the internal network.
Solution Approach 2:
The system implements preliminary protective measures by creating the virtual air gap before any access occurs. This preemptive isolation prevents malware from spreading in the first place, rather than attempting to respond to threats after they occur. The virtual machine is configured with restricted network permissions that prevent harmful actions before they can affect the internal network.
Data Source
AI summary
Aspects of the disclosure relate to processing systems that implement a virtual air gap to facilitate improved techniques for establishing console access to a cyber range virtual environment. A computing platform may receive, via a first firewall, a cyber range request and authentication credentials from a secure console host platform. By comparing the authentication credentials to access records in a stored database, the computing platform may determine an authorization level corresponding to the authentication credentials. After verifying the authentication credentials, the computing platform may grant access to a broker, which may grant access to a console hosted by the secure console host platform. The computing platform may establish, using the broker and between the console and a cyber range host platform, a connection, which may cause a user device to access, through the console, cyber ranges hosted by the cyber range host platform that correspond to the determined authorization level.