Cybersecurity Education and Training

This book provides a comprehensive overview on cybersecurity education and training methodologies. The book uses a combination of theoretical and practical elements to address both the abstract and concrete aspects of the discussed concepts.

The book is structured into two parts. The first part focuses mainly on technical cybersecurity training approaches. Following a general outline of cybersecurity education and training, technical cybersecurity training and the three types of training activities (attack training, forensics training, and defense training) are discussed in detail. The second part of the book describes the main characteristics of cybersecurity training platforms, which are the systems used to conduct the technical cybersecurity training activities. This part includes a wide-ranging analysis of actual cybersecurity training platforms, namely Capture The Flag (CTF) systems and cyber ranges that are currently being used worldwide, and a detailed study of an open-source cybersecurity training platform, CyTrONE. A cybersecurity training platform capability assessment methodology that makes it possible for organizations that want to deploy or develop training platforms to objectively evaluate them is also introduced.

This book is addressed first to cybersecurity education and training practitioners and professionals, both in the academia and industry, who will gain knowledge about how to organize and conduct meaningful and effective cybersecurity training activities. In addition, researchers and postgraduate students will gain insights into the state-of-the-art research in the field of cybersecurity training so that they can broaden their research area and find new research topics.

Introduction.- Overview of cybersecurity education and training.- Technical cybersecurity training.- Attack training.- Forensics training.- Defense training.- Security awareness training.- Cybersecurity training platforms.- Case study: Cytrone.- Case study: Kypo.- Training platform capability assessment.- Conclusion.

Razvan Beuran received the B.Sc., M.Sc., and Ph.D. degrees from Politehnica University of Bucharest, Romania, in 1999, 2000, and 2004, respectively; the Ph.D. degree was delivered jointly with Jean Monnet University, Saint Etienne, France. From 2006 to 2015, he was with the National Institute of Information and Communications Technology, Hokuriku StarBED Technology Center, Japan. Since 2015, Razvan is Associate Professor with Japan Advanced Institute of Science and Technology (JAIST), Ishikawa, Japan. His current research topics are cybersecurity, IoT/CPS security, trustworthiness, and cybersecurity training. He is a senior member of IEEE, and a member of ACM and IPSJ.

In his spare time, Razvan enjoys playing shakuhachi, a Japanese longitudinal end-blown bamboo flute, for which he has a Tozan School Master license. His other hobbies include hiking and swimming.