The National Cyber Security Centre held another iteration of technical cyber security exercise Cyber Czech 2016 on 28th February and 1st March in Brno. This time, participants were representatives of six Balkan nations: Albania, Bosnia and Herzegovina, Kosovo, Macedonia, Montenegro and Serbia. These are all members of TAIEX program run by European Commission that aims to support public administration in neighbouring regions. Exercise was traditionally held in Cybernetic Proving Ground on the premises of Institute of Computer Science (ICS) which is part of Masaryk University. Event was conducted in the form of simulation in closed, specially modified technical environment which enables techniques and manipulation with content that would pose a serious threat in an open network.

Foreign participants had a unique chance to defend given network against cyber attacks. Players were members of institutions that are responsible for assuring cyber security in their respective countries. Participants, divided into small teams, faced cyber attacks that lasted for six hours and had to handle both basic and more sophisticated incidents and events. Players’ technical skills were tested along with putting emphasis on the importance of information sharing amongst them and with other entities as well. In other words, their goal was not only to respond to attacks and technical problems, but also to deal with media and take impact of their decisions into the account. Thanks to media aspect, they could experience work in increased stress situation, just like in the case of real world cybersecurity crisis.

CC17 Balk 170301

Exercise was based on a scenario that reflected real world incidents and lessons learned gained through solutions in real world. Both scenario and narrative were fictitious and set into transportation sector. The central railroad signalization control system was the key vulnerable asset within this scenario.

Red Team, responsible for simulated attacks, consisted of experts from National Cyber Security Centre and s Institute of Computer Science. The preparation phase took approximately nine months and around fifty people from NCSC and ICS were involved.

Detailed evaluation and feedback will follow the exercise and will be provided to all participants as it is an essential part of every exercise.