SLAM-R®
SENTINEL, LEGION, AUTOBUILD, MYRMIDON, RECONSTITUTION (SLAM-R®)
The SLAM-R© appliance is the range automation engine that brings fidelity and realism to a cyberspace training and exercise range environment. SLAM-R is controlled/operated through a single Web User Interface providing the following capabilities to each CENTS platform:
- Scenario Builder and Execution Panel
- Virtual Machine Device Control
- Network/Event Monitoring
- Out-of-Band Management
- Traffic Configuration Manager
- Traffic Visualization
- Snapshot & Restore Control
- Attack Configuration Framework.
SLAM-R ENHANCED FEATURES
ADVANCED ATTACK FRAMEWORK
Automated Opposing Force (AutoOP4) is our advanced attack system that can automatically execute a pre-planned campaign to emulate an Advanced Persistent Threat (APT) as part of a cyber attack. This goes beyond our basic time-based threat emulation to include interactive trigger-based actions to emulate adversary actions. AutoOP4 includes the full set of MITRE ATT&CK TTPs.
Each attack contained in AutoOP4 is based on a real-world threat actor with data from multiple sources of threat intelligence to create an emulation of a specific threat actor or hacker group (e.g., an attack that uses known TTPs of a threat actor). Each attack plan is one instance called a campaign to signify that it is a complete instance of a campaign attack plan with defined objectives, carried out in a defined environment with success criteria.
HIGH-FIDELITY GREY SPACE
A high-fidelity emulation of core Internet services that adds realism to the training environment, giving the look and feel of being connected to the Internet. Services include routing, DNS, NTP, PKI, whois, websites, webmail, IRC, Pastebin, Tor, redirectors, social media, and file sharing. Grey space federates and/or interconnects cyber training, experimentation, and exercise environments by providing network transport and connectivity.