# CYRA: A Model-Driven CYber Range Assurance Platform
## 5 Cyber Threat and Training Models and Programmes Adaptation Tool
### Adaptation Based on Sphynx's Security Assurance Platform
#### 5.1.2 Adaptation Based on Vulnerable Assets
In terms of the next steps, efforts will focus on (a) extending the CTTP models to support the specification of models for a wider range of emulation and simulation tools, (b) extending the CTTP models and programmes adaptation tool to support multiple forms of adaptation, including the introduction of machine learning algorithms that will allow the tool to proactively adapt to the ever-increasing threat landscape and (c) defining adaptation procedures based on user and entity behavioural analytics (UEBA). The authors plan to provide a number of training programmes in an open repository to which interested parties can refer and retrieve the programmes of interest. Finally, the authors aim to assess the usability of CYRA by extending the evaluation invitations to the whole THREAT-ARREST consortium and its personnel after the final release of the platform, as well as external parties. Conceptualisation, M.S., I.S., G.S., G.H. and S.I. ; methodology, G.S. and S.I. ; software, M.S. ; validation, I.S., G.H. ; formal analysis, G.S. ; investigation, M.S. and G.H. ; data curation, M.S. ; writing--original draft preparation, M.S. and G.H. ; writing--review and editing, M.S., G.H., G.S. and S.I. ; visualisation, M.S. and G.H. ; supervision, G.S. and S.I. ; funding acquisition, G.S. and S.I. All authors have read and agreed to the published version of the manuscript. Figure 11:2 Overall satisfaction score. **Funding:** This work has received funding from the European Union's Horizon 2020 research and innovation programme under grant agreement No. 786890 (THREAT-ARREST). **Institutional Review Board Statement:** Not applicable. **Informed Consent Statement:** Not applicable. **Data Availability Statement:** Not applicable. **Conflicts of Interest:** The authors declare no conflict of interest. **Abbreviations**

The following abbreviations are used in this manuscript:

CCDOE Cooperative Cyber Defence Centre of Excellence

CTF Capture The Flag

CTTP Cyber Threat and Training Preparation

CVSS Common Vulnerability Scoring System

CVE Common Vulnerabilities and Exposures

CWE Common Weakness Enumeration

CYRA CYber Range Assurance platform

IoT Internet of Things

KPI Key Performance Indicator

ICT Information and Communications Technology

UEBA User and Entity Behavioural Analytics

VM Virtual Machine

## References

* [PERSON] et al. (2020) [PERSON]; [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON] Cyber Range Training Programme Specification Through Cyber Threat and Training Preparation Models. In _International Workshop on Model-Driven Simulation and Training Environments for Cybersecurity_; Springer: Guilford, UK, 2020; pp. 22-37. * [PERSON] et al. (2019) [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON] Model-driven cyber range training: A cyber security assurance perspective. In Computer Security; Springer: Cham, Switzerland, 2019; pp. 172-184. * [PERSON] and [PERSON] (2007) [PERSON]; [PERSON] [PERSON] Chasing Botnets: A Real Security Incident Investigation. In _2 nd Model-driven Simulation and Training Environments for Cybersecurity (MSTEC), LNCS_; Springer: Guilford, UK; Berlin/ Heidelberg, Germany, 2007; Volume 12512, pp. 111-124. * [PERSON] et al. (2019) [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON]; [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON]; [PERSON] Pattern-driven Security, Privacy, Dependability and Interoperability management of IoT environments. In Proceedings of the 24 th IEEE International Workshop on Computer Aided Modeling and Design of Communication Links and Networks (CAMAD 2019), Limassol, Cyprus, 11-13 September 2019; pp. 1-6. * Department for Digital, Culture, Media & Sport Cyber Security Breaches Survey 2021.