The National Cybersecurity R&D Laboratory (NCL) participated in Locked Shield 2023, hosted by CCDCOE

The National Cybersecurity R&D Laboratory (NCL) participated in Locked Shield 2023, which took place in Estonia from April 18 to 21, 2023. Locked Shield 2023 is the world's largest live-fire cyber defense exercise hosted by the NATO Cooperative Cyber Defense Center of Excellence (CCDCOE). Over 3,000 participants from 38 nations took part in the exercise, which involved protecting real computer systems from real-time attacks and simulating tactical and strategic decisions in critical situations. Locked Shields is a Red Team vs. Blue Team training exercise, with Blue Teams composed of NATO CCDCOE member nations and their partner nations. In addition to defending systems, teams must report incidents, execute strategic decisions, and solve forensic, legal, and media challenges. The exercise plan was prepared by 400 organizers, creating more than 5,500 virtual systems for its purpose.

Locked Shield enables cybersecurity experts to enhance their skills in defending national IT systems and critical infrastructure under real-time attacks. The focus is on realistic scenarios, cutting-edge technologies, and simulating the entire complexity of a massive cyber incident, including strategic decision-making, legal, and communication aspects.

The team, consisting of Ivan, Felix, and Niklaus, is part of the Green Team DFIR (Digital Forensic and Incident Response). As part of their responsibilities, NCL is responsible for crafting an attack scenario on an enterprise network, building up the networks and servers, and generating the digital forensic evidence files to be used in the exercise. The NCL team is part of the Singapore contingent together with participants from iTrust SUTD and Ministry of Defence.

During the exercise, the team in Tallinn, Estonia, is responsible for responding to and providing guidance to 24 international teams on queries related to the evidence generated. The exercise is designed to test the teams' ability to identify and respond to cyberattacks, using a simulated enterprise network environment.

Locked Shield 2023 is an excellent opportunity for cybersecurity professionals to showcase their skills and knowledge, as well as to learn from their peers. The NCL Green Team DFIR's participation in this event is a valuable experience that will undoubtedly benefit the team and the organization.

Comments

Popular posts from this blog

GreyHats CTF 2023

The Youth Cyber Exploration Programme (YCEP) - Central Capture-the-Flag 2023

Critical Infrastructure Defence Exercise (CIDeX) 2023