|
|
A cyber exercise is a generic term for any number of events focused
around real-time computer network attack and defense. There are
three general types of exercises:
-
Capture/Defend the Flag
- an event where team members are scored on their ability to protect or
seize specific 'flags' such as web pages, database entries, etc.
-
Inherit and Defend
- an event where a team is given a pre-built network with a list of
services and processes that must remain up and serviceable
-
Design and Defend
- the teams are given a list of requirements and approved hard/software
and build a network to defend.
White Wolf Cyber Exercises are unique in both their depth and breadth of scope and skill
-
Real world IP addresses.
We only use real IP addresses in our current brand of exercises.
This provides an element of realism and allows for the creation
of international policy-based exercises (i.e. defenders in one
city/country, attackers in another, or several countries)
-
Physical assets.
White Wolf Security exercises use cyber/physical assets that demonstrate the
connections between those two realms. Teams communicate with
other teams, spectators and the referees using VoIP phones. RFID
and SCADA components are currently under development for integration
into the exercises.
-
Interdisciplinary.
Our exercises are not just computer network attack and defend. They
regularly integrate incident handling, forensics, law enforcement and
management.
The exercises incorporate real world technology and live data. The exercises support a variety of players:
The players are:
- Defenders - those in charge of keeping servers and services up while responding to customer/business requests
- Attackers - hackers who are trying to get into the various environments
- Spectators - represent the user population of the defenders' assets (online shoppers, bank customers, etc.)
- No Man's Land - those assets that are not controlled by any team, but are available for use by anyone (root DNS, PBX switches,
stepping stones, etc.)
- Referres - the exercise managers
|
|
|
|
