Towards NICE-by-Design Cybersecurity Learning Environments: A Cyber Range for SOC Teams

Abstract Due to the evolution of cyberattacks, the need to deploy modern cybersecurity learning environments is constantly increasing. Furthermore, the security challenges of the digital era are inevitably connected to the human factor, which urges personnel to become familiar with state-of-the-art security software for mitigating and detecting cyberattacks. Cybersecurity learning environments include, among others, virtual labs, Cyber Ranges and Capture the Flag (CTF) challenges, providing interactive digital learning environments for trainees to engage in complex cybersecurity scenarios. However, scenario design is not always governed by specific design principles, and the learning outcomes of the cybersecurity exercises are not always clearly defined. In this paper, a cybersecurity educational framework was used to guide the design of cybersecurity scenarios and a Cyber Range to host the scenarios was developed as a proof-of-concept. This work suggests that educators could use the proposed design methodology to design cybersecurity learning environments, including, but not limited to, Cyber Ranges.