Kaspersky Interactive
Protection Simulation(KIPS): technicalattributionContributing
to cyber-stability
through capacitybuilding

Learn more:kaspersky.com

Kaspersky Interactive Protection Simulation:technical attribution edition for cyber-stability
through capacity-building
What is KIPS?
“Capacity-building
helps develop
the skills, humanresources, policies,
and institutions thatincrease the resilienceand security of states
so they can fully enjoy
the benefits of digitaltechnologies.”
The Final Substantive Reportof the UN OEWG, adopted
by 193 UN Member States
on March 12, 2021

Kaspersky Interactive Protection Simulation (KIPS)
is training that places players into a simulated environment
where they face a series of unexpected cyber threats, while
trying to maintain confidence.
In KIPS, players are supposed to build a cyber defense
strategy by making choices among the best pro-active
and re-active controls available. Every reaction (step) madeby players to the unfolding events changes the way thescenarios play out, and ultimately how close players cometoward victory or defeat.

What is KIPS on technical attribution?
KIPS training on technical attribution is a ‘detective’
learning exercise. It simulates a scenario whereparticipants – playing diplomats – face an attackon the UN First Committee, which deals with mattersof disarmament, global challenges and threats(including in cyberspace), and maintaining world peace
and international security. Players face several cyber
events and are provided with the profiles of five threat
actors – but only one of them is the culprit conducting
a sophisticated targeted attack against UN infrastructure.
The technical attribution edition aims to teach players about
the complexities of technical attribution; i.e., it is technicalmalware analysis. Action cards played and thus decisions
made by players through five turns will either lead themto the most accurate technical analysis and help understand
who is the culprit by collecting technical pieces of evidence,or will spark greater uncertainty and cyber-instability if theriddle is not solved.

Why KIPS is an effective exercise?
KIPS training on technical attribution is targeted atexperts in the field of cyber diplomacy, cybersecurity policy
researchers and all other practitioners who want to increase
their knowledge and awareness of the complexities oftechnical attribution as well as of the security problems
and risks arising from the use of ICTs in the context ofinternational security.
Balancing international security, national security andengineering priorities against the cost of a realistic
cyberattack, the players analyze data and make strategic
decisions based on ambiguous information and limited
resources – just as in real life.
The KIPS training or game is a dynamic awareness program
based on ‘learning by doing’:• fun, engaging, and quick (two hours);• teamwork builds cooperation;• competition fosters initiative and analysis skills;• gameplay develops a better understandingof cybersecurity measures, risks and complexities
of technical attribution.
During the KIPS game, players will learn that:• technical attribution is a complex process, and its
accuracy depends on multiple factors and technicalevidence;• cooperation with other actors, including the broader multistakeholder community, as well as exchange of information,is essential for successful cybersecurity work.

How is KIPS training organized?
KIPS training on technical attribution is organized into twoformats: live and online.
KIPS online• Two-and-a-half hours: the game and the allocated time
for discussion of the lessons learned as well as for
explaining how the best scenario should have been played• Up to 300 teams simultaneously, from any location• Teams can choose the game interface in a differentlanguage• A trainer leads the session via WebEx or Microsoft TeamsKIPS live• Two-and-a-half hours: the game and the allocated time
for discussion of the lessons learned and for explaining
how the best scenario should have been played• Up to 80 trainees in the same room*• The same language for all participants• A trainer and an assistant on site
• Printed materials provided* Once the global health situation permits the gathering of such large groups.

2021 AO Kaspersky Lab.
Registered trademarks and service marks are the property of their respective owners.

GBD-7756 Q1/21 V1

www.kaspersky.com