CyberIoT: An Initial Conceptualization of a Web-based Cyber Range for IoT

Digital technologies are changing the way people live and work. Despite the many benefits of digital technologies, they expose users to sophisticated security threats, both in home networks and in enterprise networks. User awareness of security issues surrounding their networks, hardware devices, and software is one of the best practices for mitigating security risks. Cyber range is a promising platform for enabling participants to learn cybersecurity concepts and create awareness on cyber threats through simulated exercises and training. This paper presents CyberIoT, a novel conceptual design of a cyber range platform designed as Platform-as-a-Service that allows users to instantiate, run, and operate cybersecurity training exercises. The platform is designed for implementation using OpenStack. The functional and non-functional requirements are identified. The platform architecture is based on the three-tier Web application architecture, with a Web portal, data store, and various management modules. Further research should include development of training use cases, design validation, and full system implementation.