RETAIN: Red Team Attack Injector

To combat the growing sophistication and frequency of cyber-attacks, the nations cyber-warriors must train vigilantly. Computer network defense (CND) training currently takes place either on operational networks or in virtual (or simulated) environments. The major drawback to using virtual environments is that they lack a sufficient amount of realism. Virtualized systems are frequently overly-simplified mock-ups of operational systems and lack the fidelity necessary for optimal, effective training. Training on operational networks provides a full-fidelity environment and enables the warfighters to train as they fight; however, the attackers are placed under significant restrictions to protect the operational network, since they cannot disrupt or damage network resources in the course of the exercise. ATC NY will develop the Red Team Attack Injector (RETAIN), a training system for emulating cyber-attacks on operational networks and restoring systems to normal operation at the conclusion of the exercise.