Red V.S. Blue Training Game
ICT & Cyber Security
Client company:Fontys
Sam Jammoul
Tom Morelissen
Nicky Janse
Onur Kapisiz
Wesley Martens
Project description
The main focus of the project is to make an interactive game where trainees can get hands-on experience with blue teaming and red teaming.
Context
This project is about a cybersecurity training environment for ICT students and governmental trainees. To deliver a blue team experience, there is a dashboard to monitor if there are abnormalities with the vulnerable application and to take countermeasures against them. For the red team experience, there scripted attacks and a lot of noise traffic. To guide the trainees through the required steps the training environment takes form as a capture the flag.
Results
The Red V.S. Blue Training Game will facilitate blue and red team trainees to play a game in which the trainees can get real-life hands-on experience in blue and red teaming. Raising the knowledge and experience of the trainees is the desired result.
In order to do this, a dashboard has been raised for the blue team to monitor a vulnerable application. The red team consists of automated scripts with attacks, but can also be performed by the blue teamers. The blue team has a security operations centre environment which is set up to monitor the red teaming application. All is tied together through a storyline that will look like a blue teaming capturing the flag event.
Methodology
The Red V.S. Blue Training Game is a fun an interactive way to intruduce trainees to blue teaming and red teaming. In order to achieve this, the expertise of software engineering and cyber security have been combined. The two software engineering students focussed on the CTF portal and the three cyber security students focussed on the blue team and red team environment.
About the project group
The project group consists of three students with cyber security as their graduation route and two students with software engineering as their graduation route. For this project expertise from both field has been combined into one project.
