CyberExpert: Towards an Automated Framework for Cybersecurity Expertise Acquisition and Mastery

The continuously increasing gap in cybersecurity workforce in numbers and in skill level, demands a fundamental shift in how we approach cybersecurity education and training. The complex and ever-evolving cybersecurity industry and threat landscape underscores the need for cybersecurity professionals with versatile skillset, growth mindset and resilient character to support organizations' cyber capabilities, preparedness and resilience. This makes it more challenging to develop and operate educational programs that effectively train cybersecurity talent, which is able to take on and perform in multiple roles and responsibilities, without tailoring the program to be very specific to such roles. Hence, cybersecurity educational programs must train professionals that can stand the test of time, in a fast-paced and quickly changing career. In this paper, we expand on innovative approaches we developed to support experiential learning and expertise acquisition for future cybersecurity professionals. The described approach is implemented and is continuously improved and enhanced as part of the educational framework for students in the Cybersecurity Bachelors offered at the Texas A&M University System - RELLIS Campus
^1
1
Work performed while at Texas A&M University - Commerce. We developed a technology platform (virtual and hands-on) that extends the capabilities of existing similar frameworks (cyber-range) to enable higher levels of experiential learning. A cyber-range is a technology solution, used in industry and academia that provides a dedicated environment to enable several cybersecurity use-cases. The core capability of a cyber-range is to provide users with access to safe, isolated, monitored and secured sandbox environment. We propose and continue to develop an integrated cyber-range platform, CyberExpert cyber-range, that is designed and built using open-source and accessible tools. The CyberExpert cyber-range is equipped with data collection and analysis platforms that can enable data-led closed-loop operation to enable automated collection and assessment of users' expertise acquisition and mastery of skills.