Design and Implementation of a network of specialized and Hybrid Cyber-Ranges

Over the recent years, cyber-attacks have been augmenting constantly. Attacks targeting sensors and SCADA (Supervisory Control And Data Acquisition) networks, or exploiting the growing number of networked devices, are becoming even more frequent. Referring in particular to the control infrastructures managing critical services such as water supply system, power, and electricity generation, etc. which are very much vulnerable to cyber-threats and any cyber-attack to these said facilities can result in serious consequences and damages. This has led to the need to find a way to train the teams or staff responsible for the defense of these IT systems to enable them to promptly and efficiently respond to any type of threats. The fact that it is impossible to carry out training operations directly on corporate networks or critical infrastructure has led to the birth of Cyber Ranges, virtual or hybrid systems that allow training in safe and isolated secure environments. In this context, this thesis presents a model for the implementation of a Hybrid Cyber-Range (HCR), based on the model of a real Water Supply System WSS) which will help us in two ways: on one hand trying to assess the security of the Water Supply Cyber-Physical System and on the other hand enable us to have some of the important activities of a Cyber-Range such as training teams and so on. The HCR shall combine the dynamism and flexibility of virtualized Cyber-Ranges (CR) and the realism of Cyber-Physical Systems (CPS).