Modern Aspects of Cyber-Security Training and Continuous Adaptation of Programmes to Trainees
Nowadays, more-and-more cyber-security training is emerging as an essential process for the lifelong personnel education in organizations, especially for those which operate critical infrastructures. This is due to security breaches on popular services that become publicly known and raise people’s s...
Main Authors: | , , , , , , , , , , |
---|---|
Format: | Article |
Language: | English |
Published: |
MDPI AG
2020-08-01
|
Series: | Applied Sciences |
Subjects: | |
Online Access: | https://www.mdpi.com/2076-3417/10/16/5702 |
_version_ | 1797557520808542208 |
---|---|
author | George Hatzivasilis Sotiris Ioannidis Michail Smyrlis George Spanoudakis Fulvio Frati Ludger Goeke Torsten Hildebrandt George Tsakirakis Fotis Oikonomou George Leftheriotis Hristo Koshutanski |
author_facet | George Hatzivasilis Sotiris Ioannidis Michail Smyrlis George Spanoudakis Fulvio Frati Ludger Goeke Torsten Hildebrandt George Tsakirakis Fotis Oikonomou George Leftheriotis Hristo Koshutanski |
author_sort | George Hatzivasilis |
collection | DOAJ |
description | Nowadays, more-and-more cyber-security training is emerging as an essential process for the lifelong personnel education in organizations, especially for those which operate critical infrastructures. This is due to security breaches on popular services that become publicly known and raise people’s security awareness. Except from large organizations, small-to-medium enterprises and individuals need to keep their knowledge on the related topics up-to-date as a means to protect their business operation or to obtain professional skills. Therefore, the potential target-group may range from simple users, who require basic knowledge on the current threat landscape and how to operate the related defense mechanisms, to security experts, who require hands-on experience in responding to security incidents. This high diversity makes training and certification quite a challenging task. This study combines pedagogical practices and cyber-security modelling in an attempt to support dynamically adaptive training procedures. The training programme is initially tailored to the trainee’s needs, promoting the continuous adaptation to his/her performance afterwards. As the trainee accomplishes the basic evaluation tasks, the assessment starts involving more advanced features that demand a higher level of understanding. The overall method is integrated in a modern cyber-ranges platform, and a pilot training programme for smart shipping employees is presented. |
first_indexed | 2024-03-10T17:19:06Z |
format | Article |
id | doaj.art-3fff09ea79f24a75b72ee9d328ad5c45 |
institution | Directory Open Access Journal |
issn | 2076-3417 |
language | English |
last_indexed | 2024-03-10T17:19:06Z |
publishDate | 2020-08-01 |
publisher | MDPI AG |
record_format | Article |
series | Applied Sciences |
spelling | doaj.art-3fff09ea79f24a75b72ee9d328ad5c452023-11-20T10:24:36ZengMDPI AGApplied Sciences2076-34172020-08-011016570210.3390/app10165702Modern Aspects of Cyber-Security Training and Continuous Adaptation of Programmes to TraineesGeorge Hatzivasilis0Sotiris Ioannidis1Michail Smyrlis2George Spanoudakis3Fulvio Frati4Ludger Goeke5Torsten Hildebrandt6George Tsakirakis7Fotis Oikonomou8George Leftheriotis9Hristo Koshutanski10Foundation for Research and Technology–Hellas, Institute of Computer Science, Vassilika Vouton, 70013 Heraklion, GreeceFoundation for Research and Technology–Hellas, Institute of Computer Science, Vassilika Vouton, 70013 Heraklion, GreeceInnovation Department, Sphynx Technology Solutions AG, 6300 Zug, SwitzerlandResearch Centre for Adaptive Computing Systems (CeNACS), City, University of London, London EC1V 0HB, UKDepartment of Computer Science, University of Milan, 20122 Milano, ItalyInnovation Department, Social Engineering Academy, 60322 Frankfurt, GermanyResearch Department, SimPlan, 63452 Hanau, GermanyResearch and Development Department, ITML, 11525 Athens GR, GreeceApplied Research Department, DANAOS Shipping Company, Limassol CY 3300, CyprusSystems Certification Department, TUV HELLAS (TUV NORD) SA, 15562 Athens GR, GreeceResearch Department, ATOS SPAIN SA, 28037 Madrid, SpainNowadays, more-and-more cyber-security training is emerging as an essential process for the lifelong personnel education in organizations, especially for those which operate critical infrastructures. This is due to security breaches on popular services that become publicly known and raise people’s security awareness. Except from large organizations, small-to-medium enterprises and individuals need to keep their knowledge on the related topics up-to-date as a means to protect their business operation or to obtain professional skills. Therefore, the potential target-group may range from simple users, who require basic knowledge on the current threat landscape and how to operate the related defense mechanisms, to security experts, who require hands-on experience in responding to security incidents. This high diversity makes training and certification quite a challenging task. This study combines pedagogical practices and cyber-security modelling in an attempt to support dynamically adaptive training procedures. The training programme is initially tailored to the trainee’s needs, promoting the continuous adaptation to his/her performance afterwards. As the trainee accomplishes the basic evaluation tasks, the assessment starts involving more advanced features that demand a higher level of understanding. The overall method is integrated in a modern cyber-ranges platform, and a pilot training programme for smart shipping employees is presented.https://www.mdpi.com/2076-3417/10/16/5702cyber-rangessecurity trainingsecurity modellingserious gamesdynamic adaptationtraining programmes |
spellingShingle | George Hatzivasilis Sotiris Ioannidis Michail Smyrlis George Spanoudakis Fulvio Frati Ludger Goeke Torsten Hildebrandt George Tsakirakis Fotis Oikonomou George Leftheriotis Hristo Koshutanski Modern Aspects of Cyber-Security Training and Continuous Adaptation of Programmes to Trainees Applied Sciences cyber-ranges security training security modelling serious games dynamic adaptation training programmes |
title | Modern Aspects of Cyber-Security Training and Continuous Adaptation of Programmes to Trainees |
title_full | Modern Aspects of Cyber-Security Training and Continuous Adaptation of Programmes to Trainees |
title_fullStr | Modern Aspects of Cyber-Security Training and Continuous Adaptation of Programmes to Trainees |
title_full_unstemmed | Modern Aspects of Cyber-Security Training and Continuous Adaptation of Programmes to Trainees |
title_short | Modern Aspects of Cyber-Security Training and Continuous Adaptation of Programmes to Trainees |
title_sort | modern aspects of cyber security training and continuous adaptation of programmes to trainees |
topic | cyber-ranges security training security modelling serious games dynamic adaptation training programmes |
url | https://www.mdpi.com/2076-3417/10/16/5702 |
work_keys_str_mv | AT georgehatzivasilis modernaspectsofcybersecuritytrainingandcontinuousadaptationofprogrammestotrainees AT sotirisioannidis modernaspectsofcybersecuritytrainingandcontinuousadaptationofprogrammestotrainees AT michailsmyrlis modernaspectsofcybersecuritytrainingandcontinuousadaptationofprogrammestotrainees AT georgespanoudakis modernaspectsofcybersecuritytrainingandcontinuousadaptationofprogrammestotrainees AT fulviofrati modernaspectsofcybersecuritytrainingandcontinuousadaptationofprogrammestotrainees AT ludgergoeke modernaspectsofcybersecuritytrainingandcontinuousadaptationofprogrammestotrainees AT torstenhildebrandt modernaspectsofcybersecuritytrainingandcontinuousadaptationofprogrammestotrainees AT georgetsakirakis modernaspectsofcybersecuritytrainingandcontinuousadaptationofprogrammestotrainees AT fotisoikonomou modernaspectsofcybersecuritytrainingandcontinuousadaptationofprogrammestotrainees AT georgeleftheriotis modernaspectsofcybersecuritytrainingandcontinuousadaptationofprogrammestotrainees AT hristokoshutanski modernaspectsofcybersecuritytrainingandcontinuousadaptationofprogrammestotrainees |