Towards completing the defined milestones and objectives, studies were aimed at analysing, collecting, and extracting the SPIDER user requirements that the architecture development had to realize. A fundamental step of the work was to define the 5G cybersecurity threat landscape, and the related SPIDER actors as well as to outline the possible attack scenarios.
The resulting cyber range reached its final version through the validation in realistic pilot use case scenarios (PUCs) aimed at demonstrating its applicability and validity for all requirements and with specific objectives: 1) Cybersecurity Testing: functional verification of the SPIDER platform and assessment of the platform's advanced virtualization and orchestration solutions; 2) 5G Security Training: educational effectiveness of the platform and assessment of the training of experts and non-experts; 3) Cybersecurity Investment Decision Support: validity of the proposed 5G econometric models.
One of the most significant results has been the extraction of a unique value proposition oriented towards the needs of various prospective customers and stakeholders. SPIDER has four main modalities, namely (i) the theoretical training with the goal of evaluating and improving the theoretical background of trainees, (ii) the hands-on training aimed at putting in practice the skills of trainees, (iii) the simulation training to help execute the risk assessment and econometric analysis of auditors/assessors, and (iv) security-awareness training for non-expert users to improve their soft-skills in the security domain.
In parallel, SPIDER has focused on multiple far-reaching communication, dissemination, and exploitation activities to present the significance of adoption of the SPIDER cyber range innovative features into the 5G evolution ecosystem, not only to interested stakeholders, but also to the public. Targeted community-building and dissemination activities have been supported, such as the co-organization of events (workshops, webinars, etc.) as part of clustering activities, CTF challenges, and Knowledge Transfer events, in addition to the production of a solid number of scientific papers, coupled with targeted communication activities towards broader audiences through the project’s web presence.
SPIDER's exploitation analysis identified, described, and analysed 7 Key Exploitable Results (KERs) that are part of the SPIDER platform, and that represent important outcomes for the sustainability of the project:
SPIDER Cyber range as a whole;
5G-specific emulated Scenarios;
Cyber Security Serious Game;
ML Emulation Lab;
XL-SIEM;
Continuous Risk Assessment Engine;
Assurance Platform Event Captors.
The exploitation analysis carried out for each asset has provided an overview of its specific market positioning, the expected TRL, the licensing scheme, the analysis of the market including the existing competitors and the potential customers. Moreover, a thorough business analysis activity has been carried out in support of the business exploitation of the platform, by:
1) Identifying prospective customers;
2) Performing a competitive analysis of the reference business sector;
3) Realizing a techno-economic analysis of the competitors in the same market space;
4) Analysing current IPRs arising from the platform in support of the post-project sustainability.
