How to Train Cyber Warfighters on Situational Awareness Demonstration

Training warfighters for cyber awareness is essential to national security, requiring the creation of realistic and detailed models of mobile networks, spanning both physical and virtual infrastructure. Network modeling software like Keysight EXata delivers an efficient, high-fidelity approach for cyber situational awareness, enabling warfighters to practice and refine their skills in a controlled environment. 

Assuming trainees have a foundational understanding of cyber defense, they can begin using a network modeling platform like EXata to learn how user equipment connects to the network. In a typical scenario within EXata, various parts of a 5G network are laid out in a simulated environment. Base station towers (GNodeBs) are represented by grey towers, while user equipment like smartphones or tablets are shown as blue cell phones, with connections depicted as green arrows. 

An overhead view in EXata reveals the entire 5G core network scenario, showcasing user equipment, base station towers, and connections. This view also displays network transmissions at a Constant Bit Rate (CBR) and control plane networks serving different functions, such as Authentication Servers (AUSF). 

EXata allows warfighters to rehearse responses to network faults, recognizing issues, determining causes, and deciding on the best course of action. Faults can arise from hardware failures, software issues, or interference, and understanding these is crucial for effective cyber defense. 

In the demo, a fault causes the connection between towers and devices to be lost, illustrated by the disappearance of green connection arrows. Warfighters learn to quickly identify and address such faults, restoring connectivity efficiently. This example demonstrates how modeling tools help visualize network elements within the Evolved Packet Core (EPC), enhancing understanding of their functions and interrelationships. 

Further training with EXata involves mapping network elements onto real-world terrain, creating visual representations of communication networks across sea, land, and air. This process aids in understanding control plane versus data plane messaging and improves planning and security analysis. 

EXata also trains warfighters to recognize user equipment authentication in 5G networks, starting with eNodeB and progressing through NAS message sequences to MME verification with HSS consultation. Hands-on exercises help trainees grasp control plane message sequences for network attachment and detachment. 

Understanding the differences between control plane and data plane from both operational and cybersecurity perspectives allows warfighters to identify deviations that may cause degraded or lost capabilities. For example, during a red team/blue team session simulating a pirate attack, trainees can practice responding to such scenarios. 

Additionally, EXata educates warfighters on local versus global scope system responsibilities and potential cyber effects. Understanding the impact of outages at access points helps prioritize actions during incidents. The platform also supports training on reactive and protocol-aware jamming techniques, spread spectrum techniques, directional antennas, and jamming detection and mitigation technologies. 

In summary, preparing cyber warfighters for heightened awareness involves developing accurate models of mobile networks, encompassing both physical and virtual components. Keysight EXata network modeling software offers an effective, high-fidelity approach for training warfighters in cyber situational awareness, ensuring they are well-prepared to handle real-world cyber threats and network challenges.