Abstract—Recently the threats of cyberattacks, especially of
targeted attacks are increasing rapidly and a large number of
cybersecurity incidents are occurring frequently. On the other
hand, capable personnel are greatly lacking, and strengthen the
systematic human resource development cultivating capabilities
for cybersecurity activities is becoming an urgent issue.
However, only a few parts of academia and private sector in
Japan can carry out the cybersecurity exercises because of high
cost and inflexibility of commercial or existing training
software. On this account, in order to enforce cybersecurity
practical exercises cost-effectively and flexibly, we developed a
virtual environment Cybersecurity Exercises (CyExec) system
utilizing VirtualBox and Docker. We also implemented an open
source vulnerability scanner tool WebGoat and our original
cyberattack and defense training contents on CyExec.
Index Terms—Cyberattack and defense exercise, cyber range
exercise, ecosystem, human resource development on
cybersecurity sector, threads, virtualization, vulnerability,
WebGoat.
Nobuaki Maki and Yoichi Seto are with Advanced Institute of Industrial
Technology, Tokyo, Japan (e-mail: a1841nm@aiit.ac.jp).
Ryotaro Nakata is with Institute of Information Security, Yokohama City,
Kanagawa, 221-0835, Japan.
Shinichi Toyoda and Yosuke Kasai were with Advanced Institute of
Industrial Technology, Tokyo, Japan.
Sanggyu Shin is with Tokai University, Kanagawa, Japan.
Cite: Nobuaki Maki, Ryotaro Nakata, Shinichi Toyoda, Yosuke Kasai, Sanggyu Shin, and Yoichi Seto, "An Effective Cybersecurity Exercises Platform CyExec and its Training Contents," International Journal of Information and Education Technology vol. 10, no. 3, pp. 215-221, 2020.
Copyright © 2020 by the authors. This is an open access article distributed under the Creative Commons Attribution License which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited (CC BY 4.0).