Malak Bazine
a research engineer at CentraleSupélec (Rennes campus) in the PIRAT team. My work focuses on deploying the URSID framework on Proxmox infrastructures and integrating the PTCC(Programme de Transfert aux Campus Cyber ) using URSID, with the goal of enabling realistic and reproducible cybersecurity training and experimentation environments.
Intervention
Incident response and digital investigation require realistic environments in which defenders can practice detection, analysis, and solution for cyberattacks. However, building such environments manually is time consuming, error-prone, and difficult to reproduce. This is where URSID comes in hand.
The poster presents URSID, an open source framework designed to automatically generate vulnerable IT infrastructures from high-level description of attack scenarios. The generated environments can be used for customized honeypot deployment, capture-the-flag exercises, and red-team training activities. For example, when using URSID in incident response exercises, the deployed infrastructure can be used for observing how players handle the resolving on the incident, or for training a forensic investigation.