Mission-based, game-implemented cyber training system and method
A mission-based cyber training platform allows both offensive and defensive oriented participants to test their skills in a game-based virtual environment against a live or virtual opponent. The system builds realistic virtual environments to perform the training in an isolated and controlled setting. Dynamic configuration supports unique missions using a combination of real and/or virtual machines, software resources, tools, and network components. Game engine behaves in a manner that will vary if participant attempts to replay a scenario based upon alternate options available to the engine. Scoring and leader boards are used to identify skill gaps/strengths and measure performance for each training participant. A detailed assessment of a player's performance is provided at the end of the mission and is stored in a user profile/training record.
1. A system for providing scenario-based game-style training to a student against a cyber-threat opponent comprising:
a student station comprising a processor, a video display, and a student input device;
a system server comprising a system server processor and a system server memory, said system server in communication with said student station over a communication interface;
a database of training scenarios stored in association with said at least one system server;
a scenario resource database of scenario resources including virtual tools, virtual network components and network components;
non-transitory machine-readable code stored in said system memory and executable by said system processor of said system server to cause said system server to:
1) implement a game server which is configured to receive input of a selected one of the training scenarios stored in the database of training scenarios;
2) implement a scenario interface which, in response to a selected training scenario indicated by said game server, implements the training scenario, the training scenario implemented to include a virtual scenario environment based on the selected training scenario and scenario resources, the virtual scenario environment comprising a virtual network comprising a plurality of virtual devices and one or more communication links linking said virtual devices, for use by the game server in implementing said selected training scenario as a game;
3) cause said video display of said student station to display a graphical representation of a least a portion of said virtual scenario environment to said student;
4) receive, from said student station, one or more student actions;
5) implement, via said scenario interface, changes to said virtual scenario environment in response to said one or more student actions;
6) implement a cyber-threat opponent to said student, said cyber-threat opponent communicating with said scenario interface to receive information regarding the training scenario and said one or more student actions to generate opponent actions which are implemented by the scenario interface relative to said virtual scenario environment; and
7) cause said video display of said student station to display one or more modified graphical representations of said virtual scenario environment as modified by said one or more student actions and opponent actions;
said game server configured to generate and cause said student station to display information regarding a student evaluation based upon student actions during said training scenario.
2. The system of claim 1 , wherein said graphical representation of at least a portion of said virtual scenario environment comprises a graphical representation of at least a portion of said virtual network, wherein said virtual devices are illustrated as graphical elements.
3. The system of claim 1 , further comprising a trainer station comprising a processor, a video display and a trainer input device, the trainer station connected to the system server and communicating with the student station.
4. The system of claim 3 , wherein said server is configured to cause said video display of said trainer station to display a trainer interface, the trainer interface presenting a duplicate of at least a portion of information presented at the student station to provide to a trainer a real-time view of activity of a student on the student station.
5. The system of claim 1 , wherein said scenario interface comprises a first service associated with each of said plurality of virtual devices in said virtual scenario environment and a second service in communication with each of said first services, said second service located external to said virtual scenario environment, each of said first services and said second service cooperating to implement said one or more student actions.
6. The system of claim 1 , wherein the student evaluation comprises a numerical game score.
7. The system of claim 1 , wherein a number of game objectives are defined by said game server in relation to the selected training scenario, wherein said display of said student station displays information regarding said number of game objectives in relation to said graphical representation.
8. The system of claim 7 , wherein said student evaluation is dependent upon a successful completion of one or more of the number of game objectives.
9. The system of claim 1 , wherein the game server is further configured to capture and log activities implemented relative to said training scenario.
10. The system of claim 1 , wherein said game server is configured to randomize one or more of said plurality of virtual devices.
11. The system of claim 10 , wherein said game server is configured to randomize said one or more of said plurality of virtual devices between different instances of the same training scenario in order to vary said training scenario.
12. The system of claim 1 , wherein information regarding said actions by said student are collected by one or more sensors and stored in a log associated with said system server.
13. The system of claim 1 , wherein the scenario interface comprises a virtual event manager.
14. The system of claim 13 , wherein said virtual event manager comprises an orchestration controller operating within the virtual scenario environment and which communicates with an orchestration manager residing outside said virtual scenario environment.
15. The system of claim 1 , wherein said game server is configured to implement a mission preparation phase comprising the presentation of information to said student via said student station to prepare said student for said selected training scenario.
16. The system of claim 1 , wherein said game server is configured to permit said student to replay one or more portions of said game-style training when completed, said replay comprising the graphical display of one or more of said student actions and/or opponent actions as previously displayed.