Modern Aspects of Cyber-Security Training and Continuous Adaptation of Programmes to Trainees

Nowadays, more-and-more cyber-security training is emerging as an essential process for the lifelong personnel education in organizations, especially for those which operate critical infrastructures. This is due to security breaches on popular services that become publicly known and raise people’s s...

Full description

Bibliographic Details
Main Authors: George Hatzivasilis, Sotiris Ioannidis, Michail Smyrlis, George Spanoudakis, Fulvio Frati, Ludger Goeke, Torsten Hildebrandt, George Tsakirakis, Fotis Oikonomou, George Leftheriotis, Hristo Koshutanski
Format: Article
Language:English
Published: MDPI AG 2020-08-01
Series:Applied Sciences
Subjects:
Online Access:https://www.mdpi.com/2076-3417/10/16/5702
_version_ 1797557520808542208
author George Hatzivasilis
Sotiris Ioannidis
Michail Smyrlis
George Spanoudakis
Fulvio Frati
Ludger Goeke
Torsten Hildebrandt
George Tsakirakis
Fotis Oikonomou
George Leftheriotis
Hristo Koshutanski
author_facet George Hatzivasilis
Sotiris Ioannidis
Michail Smyrlis
George Spanoudakis
Fulvio Frati
Ludger Goeke
Torsten Hildebrandt
George Tsakirakis
Fotis Oikonomou
George Leftheriotis
Hristo Koshutanski
author_sort George Hatzivasilis
collection DOAJ
description Nowadays, more-and-more cyber-security training is emerging as an essential process for the lifelong personnel education in organizations, especially for those which operate critical infrastructures. This is due to security breaches on popular services that become publicly known and raise people’s security awareness. Except from large organizations, small-to-medium enterprises and individuals need to keep their knowledge on the related topics up-to-date as a means to protect their business operation or to obtain professional skills. Therefore, the potential target-group may range from simple users, who require basic knowledge on the current threat landscape and how to operate the related defense mechanisms, to security experts, who require hands-on experience in responding to security incidents. This high diversity makes training and certification quite a challenging task. This study combines pedagogical practices and cyber-security modelling in an attempt to support dynamically adaptive training procedures. The training programme is initially tailored to the trainee’s needs, promoting the continuous adaptation to his/her performance afterwards. As the trainee accomplishes the basic evaluation tasks, the assessment starts involving more advanced features that demand a higher level of understanding. The overall method is integrated in a modern cyber-ranges platform, and a pilot training programme for smart shipping employees is presented.
first_indexed 2024-03-10T17:19:06Z
format Article
id doaj.art-3fff09ea79f24a75b72ee9d328ad5c45
institution Directory Open Access Journal
issn 2076-3417
language English
last_indexed 2024-03-10T17:19:06Z
publishDate 2020-08-01
publisher MDPI AG
record_format Article
series Applied Sciences
spelling doaj.art-3fff09ea79f24a75b72ee9d328ad5c452023-11-20T10:24:36ZengMDPI AGApplied Sciences2076-34172020-08-011016570210.3390/app10165702Modern Aspects of Cyber-Security Training and Continuous Adaptation of Programmes to TraineesGeorge Hatzivasilis0Sotiris Ioannidis1Michail Smyrlis2George Spanoudakis3Fulvio Frati4Ludger Goeke5Torsten Hildebrandt6George Tsakirakis7Fotis Oikonomou8George Leftheriotis9Hristo Koshutanski10Foundation for Research and Technology–Hellas, Institute of Computer Science, Vassilika Vouton, 70013 Heraklion, GreeceFoundation for Research and Technology–Hellas, Institute of Computer Science, Vassilika Vouton, 70013 Heraklion, GreeceInnovation Department, Sphynx Technology Solutions AG, 6300 Zug, SwitzerlandResearch Centre for Adaptive Computing Systems (CeNACS), City, University of London, London EC1V 0HB, UKDepartment of Computer Science, University of Milan, 20122 Milano, ItalyInnovation Department, Social Engineering Academy, 60322 Frankfurt, GermanyResearch Department, SimPlan, 63452 Hanau, GermanyResearch and Development Department, ITML, 11525 Athens GR, GreeceApplied Research Department, DANAOS Shipping Company, Limassol CY 3300, CyprusSystems Certification Department, TUV HELLAS (TUV NORD) SA, 15562 Athens GR, GreeceResearch Department, ATOS SPAIN SA, 28037 Madrid, SpainNowadays, more-and-more cyber-security training is emerging as an essential process for the lifelong personnel education in organizations, especially for those which operate critical infrastructures. This is due to security breaches on popular services that become publicly known and raise people’s security awareness. Except from large organizations, small-to-medium enterprises and individuals need to keep their knowledge on the related topics up-to-date as a means to protect their business operation or to obtain professional skills. Therefore, the potential target-group may range from simple users, who require basic knowledge on the current threat landscape and how to operate the related defense mechanisms, to security experts, who require hands-on experience in responding to security incidents. This high diversity makes training and certification quite a challenging task. This study combines pedagogical practices and cyber-security modelling in an attempt to support dynamically adaptive training procedures. The training programme is initially tailored to the trainee’s needs, promoting the continuous adaptation to his/her performance afterwards. As the trainee accomplishes the basic evaluation tasks, the assessment starts involving more advanced features that demand a higher level of understanding. The overall method is integrated in a modern cyber-ranges platform, and a pilot training programme for smart shipping employees is presented.https://www.mdpi.com/2076-3417/10/16/5702cyber-rangessecurity trainingsecurity modellingserious gamesdynamic adaptationtraining programmes
spellingShingle George Hatzivasilis
Sotiris Ioannidis
Michail Smyrlis
George Spanoudakis
Fulvio Frati
Ludger Goeke
Torsten Hildebrandt
George Tsakirakis
Fotis Oikonomou
George Leftheriotis
Hristo Koshutanski
Modern Aspects of Cyber-Security Training and Continuous Adaptation of Programmes to Trainees
Applied Sciences
cyber-ranges
security training
security modelling
serious games
dynamic adaptation
training programmes
title Modern Aspects of Cyber-Security Training and Continuous Adaptation of Programmes to Trainees
title_full Modern Aspects of Cyber-Security Training and Continuous Adaptation of Programmes to Trainees
title_fullStr Modern Aspects of Cyber-Security Training and Continuous Adaptation of Programmes to Trainees
title_full_unstemmed Modern Aspects of Cyber-Security Training and Continuous Adaptation of Programmes to Trainees
title_short Modern Aspects of Cyber-Security Training and Continuous Adaptation of Programmes to Trainees
title_sort modern aspects of cyber security training and continuous adaptation of programmes to trainees
topic cyber-ranges
security training
security modelling
serious games
dynamic adaptation
training programmes
url https://www.mdpi.com/2076-3417/10/16/5702
work_keys_str_mv AT georgehatzivasilis modernaspectsofcybersecuritytrainingandcontinuousadaptationofprogrammestotrainees
AT sotirisioannidis modernaspectsofcybersecuritytrainingandcontinuousadaptationofprogrammestotrainees
AT michailsmyrlis modernaspectsofcybersecuritytrainingandcontinuousadaptationofprogrammestotrainees
AT georgespanoudakis modernaspectsofcybersecuritytrainingandcontinuousadaptationofprogrammestotrainees
AT fulviofrati modernaspectsofcybersecuritytrainingandcontinuousadaptationofprogrammestotrainees
AT ludgergoeke modernaspectsofcybersecuritytrainingandcontinuousadaptationofprogrammestotrainees
AT torstenhildebrandt modernaspectsofcybersecuritytrainingandcontinuousadaptationofprogrammestotrainees
AT georgetsakirakis modernaspectsofcybersecuritytrainingandcontinuousadaptationofprogrammestotrainees
AT fotisoikonomou modernaspectsofcybersecuritytrainingandcontinuousadaptationofprogrammestotrainees
AT georgeleftheriotis modernaspectsofcybersecuritytrainingandcontinuousadaptationofprogrammestotrainees
AT hristokoshutanski modernaspectsofcybersecuritytrainingandcontinuousadaptationofprogrammestotrainees