A theoretical model for enhancing cyber crisis training in cyber ranges: bridging cognitive load, situational awareness, and immersion
摘要
While cyberattacks against organisations are becoming increasingly more frequent and impactful in our daily lives, training cyber crisis management cells is becoming a priority for many countries. Simulation training using a cyber range is a solution that enhances skills acquisition and learning effectiveness. However, cyber range training involves complex systems comprising fictional scenarios, event injection, physical space, communication tools, and human interaction between learners and orchestrators. Predicting human behaviours in such complex systems requires researchers to refer to multiple theoretical models developed in other fields. This paper aims to provide the community with a preliminary model integrating the critical concepts of immersive learning in those situations. We first provide a literature review on the relevance of addressing human factor needs in cybersecurity training. We also highlight three key concepts when studying cyber crisis management training: immersion, situation awareness and cognitive load. Moreover, no existing theory adequately addresses the close interactions among these components during cyber range-based training. We propose a model along with a corresponding research agenda. This model explicitly outlines assumptions regarding the relationships among the three concepts. Our research agenda is associated with hypotheses that the community may test. Finally, we discuss how this model could enhance cyber crisis management and immersive learning experiences.