It is undeniable that we are witnessing an unprecedented digital revolution. However, recent years have been characterized by the explosion of cyberattacks, making cybercrime one of the most profitable businesses on the planet. That is why training in cybersecurity is increasingly essential to protect the assets of cyberspace. One of the most vital tools to train cybersecurity competencies is the Cyber Range, a virtualized environment that simulates realistic networks. The paper at hand introduces SCORPION, a fully functional and virtualized Cyber Range, which manages the authoring and automated deployment of scenarios. In addition, SCORPION includes several elements to improve student motivation, such as a gamification system with medals, points, or rankings, among other elements. Such a gamification system includes an adaptive learning module that is able to adapt the cyberexercise based on the users' performance. Moreover, SCORPION leverages learning analytics that collects and processes telemetric and biometric user data, including heart rate through a smartwatch, which is available through a dashboard for instructors. Finally, we developed a case study where SCORPION obtained 82.10% in usability and 4.57 out of 5 in usefulness from the viewpoint of a student and an instructor. The positive evaluation results are promising, indicating that SCORPION can become an effective, motivating, and advanced cybersecurity training tool to help fill current gaps in this context.
翻译:不可否认,我们正见证一场前所未有的数字革命。然而近年来网络攻击事件激增,网络犯罪已成为全球最盈利的行业之一。因此,开展网络安全培训对保护网络空间资产愈发重要。网络靶场作为训练网络安全能力的关键工具,是一种模拟真实网络的虚拟化环境。本文介绍SCORPION——一个功能完备的虚拟化网络靶场,可管理场景的编写与自动化部署。此外,SCORPION集成了多项提升学员积极性的要素,包括包含勋章、积分、排行榜等元素的游戏化系统。该游戏化系统配备自适应学习模块,能根据用户表现动态调整网络演练内容。同时,SCORPION运用学习分析技术,通过智能手表等设备采集并处理用户遥测与生物特征数据(如心率),并通过教师仪表盘进行可视化呈现。最后,我们开展了案例研究:从学员和教师视角评估,SCORPION在可用性方面获得82.10%的评分,实用性评分达4.57分(满分5分)。积极的评估结果表明,SCORPION有望成为高效、具激励性且先进的网络安全培训工具,有助于填补当前该领域的空白。