AWS For Cyberattack Simulation

Abstract

This study focused on moving cyberattack simulations to AWS services. As keeping platforms up and running for yearly tests can be expensive, we focused on how to automate the environment building and lifecycle. We evaluated the most common cyberattacks and ended up excluding DDoS and Phishing as Phishing is mostly tricking the people and cannot be tested without targets.

The increase request of testing and remote working has moved us to situation where we need to have scalable testing environment where testers can collaborate on the projects. This is why cloud services were being tested, and physical devices are being left behind.

This study covers the implementation of cyberattack simulation platform with automation tool Terraform. Security testing does only cover sharing malicious media and how we did implement command and control environment as this plays big part in most of the cyberattacks.

Testing the cyberattack simulation platform was successful. We managed automate the deployment, did solve the media share by using AWS S3 buckets and tested the C2 implant connections to the command-and-control server.