# Cyber Ranges and TestBeds for Education, Training, and Research
## 3 Background  
Among many cyber incidents that have occurred in the last decade, two of them can be considered as major triggers for the development of Cyber Ranges--firstly the attack against the nuclear program of Iran. This attack that was revealed in 2010 used the computer \begin{table}
\begin{tabular}{l l l l l l} \hline \hline
**Survey** & **Reference** & **Systems Studied** & **Focus Area** & **Year** & **Method** \\ \hline [PERSON] et al. & [14] & 30 & Broad & 2013 & Literature Review \\ \hline [PERSON] et al. & [15] & 30 & ICS & 2015 & Literature Review \\ \hline [PERSON] et al. & [16] & 100 & Broad & 2019 & Literature Review \\ \hline [PERSON] et al. & [17] & 28 & CTFs & 2020 & Empirical Review \\ \hline [PERSON] et al. & [18] & 44 & Broad & 2020 & Literature Review \\ \hline [PERSON] et al. & Our survey & 25 & Broad & 2021 & Literature Review Structured Interviews \\ \hline \hline \end{tabular}
\end{table} 
Table 1: Related surveys on Cyber Ranges and TestBeds. worm Stuxnet and specifically targeted the programmable logic controllers (PLCs) used to automate machine processing systems. Since then, the malware has been mutated and discovered in other industrial and energy installations. Secondly, on 23 December 2015 via a series of cyber-attacks, cyber attackers remotely controlled the Ukrainian power grid, specifically the SCADA distribution management system, and eventually caused a significant power outage to the Ukrainian constituency. The above mentioned incidents have been more than persuasive of the vulnerability of industrial systems. This resulted in widely opening the way for the development of cyber ranges. Initially, an up-to-date survey of the present situation of Cyber Range systems was conducted. This survey has revealed multiple useful outcomes. Some of them are the characteristics of modern cyber ranges and testing beds, the various development platforms used, the tools and methods which are implemented, how fast do the implementations occur, how are the exercises conducted and executed, how are the relevant scenarios created and implemented, etc. Apart from the need to test and evaluate the cybersecurity aspect of applications, tools, and systems, cyber ranges are extremely useful for the capacity building of cyber experts. They must develop and possess several abilities like being deeply technically skilled, capable of recognizing and responding to complicated and urgent situations, able to assess risks and vulnerabilities, to handle uncertainty, to solve problems to provide explanations to think adversarial. In a nutshell, today's security experts must possess a \"security mindset\" as described in [19]. Various definitions of cyber ranges have been given in the relevant literature and publications. The definition given in NIST one-paper [20] has been chosen as the first among equals. Thus, according to NIST, cyber ranges are interactive, simulated representations of an organization's local network, system, tools, applications that are connected to a simulated Internet level environment. They provide a safe, legal environment to gain hands-on cyber skills and a secure environment for product development and security posture testing. The research performed reveals that the environment of cyber ranges in terms of their development can be categorized into three main types: simulation, emulation, and hybrid. A Simulation involves using a model, a virtual instance in order to recreate a complex network environment based on the real network components' behaviour. Emulation is when the cyber range runs on the dedicated physical network infrastructure of the CR. Hybrid emerges from a customized combination of any of the above types. An additional category refers to overlay cyber ranges which are the instances that run in parallel with the actual production systems on the real equipment and infrastructure. Recently, attention to Cyber Ranges has been growing. Cyber range systems are predominantly used for three main objectives: Research, Training and Exercise.