Automating the Generation of Cyber Range Virtual Scenarios with VSDL

A cyber range (CR) is an environment used for training security experts and testing attack defense tools procedures. Usually, a simulates one or more critical infrastructures that attacking (red) defending (blue) teams must compromise protect, respectively. The infrastructure can be physically assembled, but much convenient to rely on the Infrastructure as Service (IaaS) paradigm. Although some modern technologies support IaaS, design deployment of scenarios interest are mostly manual. As consequence, it common practice have hosting few (sometimes only one), consolidated scenarios. However, reusing same scenario may significantly reduce effectiveness sessions. In this paper, we propose framework automating definition arbitrarily complex relies virtual description language (VSDL), i.e., domain-specific defining high-level features desired while hiding low-level details. semantics VSDL given in terms constraints satisfied by infrastructure. These then submitted SMT solver check satisfiability specification. If satisfiable, specification gives rise model automatically converted set scripts IaaS provider.