Cyber Exercises

A cyber exercise is a generic term for any number of events focused around real-time computer network attack and defense. There are three general types of exercises:

  1. Capture/Defend the Flag - an event where team members are scored on their ability to protect or seize specific 'flags' such as web pages, database entries, etc.
  2. Inherit and Defend - an event where a team is given a pre-built network with a list of services and processes that must remain up and serviceable.
  3. Design and Defend - the teams are given a list of requirements and approved hard/software and build a network to defend.

White Wolf Cyber Exercises

White Wolf Cyber Exercises are unique in both their depth and breadth of scope and skill.

  1. Real world IP addresses
    We only use real IP addresses in our current brand of exercises. This provides an element of realism and allows for the creation of international policy-based exercises (i.e. defenders in one city/country, attackers in another, or several countries).
  2. Physical assets
    White Wolf Security exercises use both cyber and physical assets that demonstrate the connections between those two realms. Teams communicate with other teams, spectators and the referees using VoIP phones. RFID and SCADA components are currently under development for integration into the exercises.
  3. Interdisciplinary
    Our exercises are not just computer network attack and defense. Exercises regularly integrate incident handling, forensics, law enforcement and management.

How They Work

The exercises incorporate real world technology and live data. The exercises support a variety of players:

Exercise Participants

The players are:

  • Defenders - Those in charge of keeping servers and services up while responding to customer and business requests.
  • Attackers - Hackers attempting to break in to the various environments.
  • Spectators - Represent the user population of the defenders' assets (online shoppers, bank customers, etc.)
  • No Man's Land - Assets that are not controlled by any team, but are available for use by anyone (root DNS servers, PBX switches, stepping stones, etc.)
  • Referees - The exercise managers.

Global Calendar (coming soon)