Developers: | Solar (formerly Rostelecom-Solar) |
Last Release Date: | 2024/09/02 |
Branches: | Information security |
Content |
The main articles are:
- Distance Learning Technologies
- IT in Education
- IT in the education of the Russian Federation
- Online Education (Russian Market)
- Online Education (Global Market)
2024
FSTEC Level 4 Certification
In 2024, the Solar Group initiated the certification of the Solar CyberMir software complex, taking into account the requirements of customers, for whom compliance with increased software reliability standards is an important criterion. As a result of routine checks in the testing laboratory and the certification body of the FSTEC of Russia, the platform for conducting cyber exercises received a certificate of compliance with the 4th level of trust. The company announced this on December 17, 2024.
This level of certification places high demands on software and secure software development processes. The software package has undergone a series of additional checks, including security analysis, static code analysis (SAST), dynamic application analysis (DAST) and other types of tests.
The Solar CyberMir platform is used to organize cyber training, build cyber polygons and develop specialist skills cyber security INFORMATION SECURITY. Customers can use ready-made industry infrastructures that are as close as possible to real business counterparts. The Solar CyberMir platform in on-premium format is in demand for training specialists from SOC corporate centers, federal and regional departments and law enforcement agencies who must follow increased cybersecurity standards. Creating a cyber polygon on your own infrastructure is most often necessary industrial power in both companies and ENERGY INDUSTRY. financial public sector
Typically, companies cannot use real infrastructures or engage Red Team to test the skills of SOC employees. Therefore, for them, the digital twin of the infrastructure becomes an effective solution, taking into account the increased requirements for cybersecurity. When configuring cyber training scenarios, you can try the most complex and destructive types of attacks, since the action takes place not in real conditions, but on a virtual site. And most importantly, cyber training on the CyberMir platform helps in a few days to identify weaknesses in cyber defense, determine employee growth zones and draw up a development plan for the information security team, "said Pavel Frolov, head of the development department of the Cyberpoligon department of Solar Group. |
Since 2023, Solar has been integrating the CyberMir software complex into projects to create cyber polygons in the interests of Russian departments. In 2024, the company also signed cooperation agreements to create a platform for a closed circuit in government organizations in the CIS countries. Therefore, the certification of the FSTEC of Russia becomes an additional factor of confidence for foreign customers in the public sector and an indicator of the quality of technologies that Solar exports to other countries.
Solar CyberMir 6.0
Solar Group of Companies has released an updated version of the Solar CyberMir cyber training software complex. The completely redesigned interface design and updated functionality of the personal account allow you to develop the skills of blue team specialists based on tracks adaptable to each participant. In one intensive cycle, the skills of cyber defense employees grow by up to 30-40%. The developer announced this on September 2, 2024.
The Solar CyberMir software platform is used for practical training of information security specialists in the field of monitoring, response and investigation of cyber incidents. On the basis of the platform, practical cyber training is organized with ready-made scenarios based on seven industry infrastructures, command and staff training to check information security incident response plans and custom cyber training with variation of IPS, infrastructure and scenarios.
Solar CyberMir allows you to organize simultaneously competitions for 40 teams in Red vs. Blue format, forwards and defenders of IT infrastructure. The concept of competitions on the platform reflects scenarios of attacks on critical infrastructure, modeled on the basis of real cyber threats to the Russian business and the public sector. The digital platform allows you to organize corporate competitions and cyber championships in cloud and on-premium format.
In the updated personal account, after authorization on the platform, participants have access to statistics with the results of passing cyber exercises and information security competitions in personal and team tests. The platform also displays analytics on the number of detected "flags" in CTF tournaments, indicators of compromise, availability and inaccessibility of services during cyber exercises. Participants in cyber exercises and competitions can analyze data on the applied techniques and vectors of attacks at past events and plan preparations for upcoming events.
In addition, users are available data that reflect the current status of information security incident monitoring and response skills. As of September 2024, the average assessment of the competencies of qualified specialists is 63 points out of 100 possible. According to experts of the Solar Group, competency analytics will be in demand for the preparation of individual and team plans for the development of blue team employees, testing the practical skills and knowledge of potential candidates.
{{quote 'We organize cyber training for hundreds of companies annually, so the platform development plan includes customer wishes, international experience in building cyber polygons and is constantly enriched with feedback from our coaches. This allows us to implement in advance the changes in demand in the near future. It is important to note that the development of skills of cyber defense teams (blue team) is one of the key trends in information security according to reports from Gartner and Forrester, "said Evgeny Akimov, director of the Cyber Police Department of Solar Group. }}
As of September 2024, Solar Group of Companies is conducting several projects in Russia and friendly countries to build corporate cyber polygons for the largest holdings and government agencies. For this type of organization, the on-premium solution for developing cyber defense skills of its employees is most in demand, so the vendor will provide them with access to SolarCyberMir 6.0 in priority mode.
Along with the expansion of the platform functionality, Solar Group consistently improves the user interface and client experience. So, in the release 6.0, the redesign of the application was implemented, including changes in the color scheme, fonts and graphic components. By the end of 2024, the Solar group of companies also plans to complete a UX study, according to the results of which the vendor will present an updated interface of the Solar CyberMir platform.