CylonNet: un entorno para el entrenamiento en ciberseguridad

Abstract

The cybersecurity educational framework is not what it used to be; nowadays, there are more resources to learn the skills that involve this practice; however, no resource is sufficient if cyberattacks continue to increase against both companies and citizens. It is from this latter premise that CylonNet arises, an environment for learning cybersecurity in a practical way through vulnerable laboratories aimed at students of Computer Engineering at Complutense University. To this end, a web application has been developed where users can register and index laboratories of varying difficulty levels and subjects related to the world of cybersecurity, created by community members with administrative permissions. These laboratories will be deployed using Docker, a virtualization technology that uses containers to run preconfigured applications. This configuration will intentionally include vulnerabilities that users must find to take control of the machine. Once the laboratories are solved by taking control of them, users must capture the flag automatically included in them and verify it in the application. If correct, the user will gain experience to level up in a rank-based system visible on the ranking included on CylonNet. Finally, the developed system, that is, CylonNet, will be modularized and divided into different containers with different responsibilities, available for rapid and efficient deployment using Docker Compose, making it accessible and reproducible across multiple platforms.