Cyber attacks and their consequences have become a major source of risk in recent years, as they can cause physical damage to both infrastructure and people. To prevent these risks, several approaches have been proposed that involve active learning in simulated and/or virtualized attack/defense environments. These environments, called Cyber Range, allow the direct learning of both attack (Red Team) and defense (Blue Team) techniques, in different types of scenarios i.e., Pure-IT, IoT/IIoT, IT/OT etc (S Mendhurwar 2021). Using Cyber Ranges allows you to test real threats, assess security risks and validate mitigation techniques in a secure environment. However, such environments usually do not provide the possibility of considering communications other than Ethernet-based ones. An attacker is assumed to have TCP/IP connectivity to the system under attack. This results in a small and unrealistic attack surface (Welch 2003) especially in the wireless environment. The availability of low-cost hardware and the pervasiveness of wireless communications makes it necessary to develop new platforms that allow the simulation of RF attack/defense scenarios. The objective of this thesis activity will be to fill this gap by developing a Proof-of-Concept (PoC) compatible with a "Classic" Cyber Range and implementing a wireless communication channel, with particular attention to the data link and layer emulation. physicist.
Gli attacchi informatici e le loro conseguenze sono diventati una delle principali fonti di rischio negli ultimi anni, poiché possono causare danni fisici sia alle infrastrutture che alle persone. Per prevenire tali rischi, sono stati proposti diversi approcci che prevedono l’apprendimento attivo in ambienti di attacco/difesa simulati e/o virtualizzati. Tali ambienti, denominati Cyber Range, permettono l’apprendimento diretto sia di tecniche di attacco (Red Team) che di Difesa (Blue Team), in scenari di diversa tipologia i.e., Pure-IT, IoT/IIoT, IT/OT etc (S. Mendhurwar 2021). L’utilizzo dei Cyber Range consente di sperimentare minacce reali, valutare i rischi per la sicurezza e convalidare le tecniche di mitigazione in un ambiente sicuro. Tuttavia, tali ambienti di solito non prevedono la possibilità di considerare comunicazioni diverse da quelle Ethernet-based. Si presume che un utente malintenzionato abbia una connettività TCP/IP al sistema sotto attacco. Ciò si traduce in una superficie di attacco ridotta e non realistica (Welch 2003) specialmente in ambito wireless. La disponibilità di hardware a basso costo e la pervasività delle comunicazioni wireless, rende necessario lo sviluppo di nuove piattaforme che permettano la simulazione di scenari attacco/difesa RF. L'obiettivo di questa attività di tesi sarà colmare questa lacuna sviluppando un Proof-of-Concept (PoC) compatibile con un Cyber Range “Classico” ed implementare un canale di comunicazione wireless, con particolare attenzione al collegamento dati e all'emulazione del livello fisico.
PROGETTAZIONE DI RETI WIRELESS VIRTUALIZZATE PER APPLICAZIONI IN AMBITO CYBER RANGE
LATERZA, LUCA
2022/2023
Abstract
Cyber attacks and their consequences have become a major source of risk in recent years, as they can cause physical damage to both infrastructure and people. To prevent these risks, several approaches have been proposed that involve active learning in simulated and/or virtualized attack/defense environments. These environments, called Cyber Range, allow the direct learning of both attack (Red Team) and defense (Blue Team) techniques, in different types of scenarios i.e., Pure-IT, IoT/IIoT, IT/OT etc (S Mendhurwar 2021). Using Cyber Ranges allows you to test real threats, assess security risks and validate mitigation techniques in a secure environment. However, such environments usually do not provide the possibility of considering communications other than Ethernet-based ones. An attacker is assumed to have TCP/IP connectivity to the system under attack. This results in a small and unrealistic attack surface (Welch 2003) especially in the wireless environment. The availability of low-cost hardware and the pervasiveness of wireless communications makes it necessary to develop new platforms that allow the simulation of RF attack/defense scenarios. The objective of this thesis activity will be to fill this gap by developing a Proof-of-Concept (PoC) compatible with a "Classic" Cyber Range and implementing a wireless communication channel, with particular attention to the data link and layer emulation. physicist.I documenti in UNITESI sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.
https://hdl.handle.net/20.500.14253/81043