System security assessment using a cyber range

The paper explains the concept of a cyber range and its use for performing system security assessments. It shows the advantage of evaluating security from a whole-system perspective rather than individual components and undertaking this with no risks of contamination, damage or degradation of the actual system. Moving the architecture of a real system into a cyber range in a meaningful and costeffective way is the key challenge for performing security assessments. A solution is to use representative models and virtualisation however the paper explains that it is necessary to be clear what side effects this might have.