CyFRS: A Fast Recoverable System for Cyber Range Based on Real Network Environment

Architecture of CyFRS

Abstract

In order to solve the problem that viruses with virtual environment detection mechanism cannot be in a virtual network environment, and in a real network environment, cyber experiments may not be performed repeatedly because of the destructive nature of some viruses. This paper proposes a fast recoverable system of cyber range based on a real network (CyFRS). We utilize the Windows and Linux dual system as the primary environment of the cyber range, implement partition backup and recovery based on Linux dd command, and provide a remote image server to guarantee the reliability of the mirror service. Eventually, we achieve the recovery of a damaged system within 4 minutes.

Publication
2020 Information Communication Technologies Conference