CERBERE: Cybersecurity Exercise for Red and Blue team Entertainment, REproducibility - CentraleSupélec
Communication Dans Un Congrès Année : 2023

CERBERE: Cybersecurity Exercise for Red and Blue team Entertainment, REproducibility

Résumé

Experimenting in cybersecurity requires manipulating reliable and realistic data. In particular, labelled data derived from the observation of a complete campaign is rarely available, due to its high sensitivity and the difficulty of accurately labelling datasets. This situation harms the reproducibility of research results and therefore to their impact. In this article, we present the CERBERE project that addresses this issue through a reproducible attack-defense exercise and a labelled dataset usable for research purposes. The attack-defense exercise is first composed of an exercise for red teamers automatically deployed with variable attack scenarios. Second, an exercise for blue teamers can be operated using the system and network logs generated during the attack phase. We provide with this article, the software to rebuild the infrastructure for red teamers. We share a labelled dataset where we spot the ground truth, i.e. the log lines that have been involved in the attacker's actions.
Fichier principal
Vignette du fichier
CERBERE_final.pdf (997.62 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04285565 , version 1 (14-11-2023)

Licence

Identifiants

Citer

Pierre-Victor Besson, Romain Brisse, Hélène Orsini, Natan Talon, Jean-François Lalande, et al.. CERBERE: Cybersecurity Exercise for Red and Blue team Entertainment, REproducibility. CyberHunt 2023 - 6th Annual Workshop on Cyber Threat Intelligence and Hunting, Dec 2023, Sorrento, Italy. pp.2980-2988, ⟨10.1109/BigData59044.2023.10386953⟩. ⟨hal-04285565⟩
180 Consultations
204 Téléchargements

Altmetric

Partager

More