Observe-Orient-Decide-Act (OODA) for Cyber Security Education

Abstract

A cyber range is a term to define an isolated simulation environment that can be used for cybersecurity training. As a training tool, the cyber range has a crucial role in improving the competence of its users. Isolated environmental conditions allow users to increase competence through cybersecurity training based on predetermined scenarios. There is no standard for scenario in training, most of them using common case. In this research, the cyber range is built based on the cyber range taxonomy and uses the observe-orient-decide-act (OODA) loop that has been proven for military education. The OODA loop is implemented and helps guiding each step of the attack and its handling in the built scenario. The scenario chosen is a case of data theft since data theft incidents have often occurred so that it is easier for user to understand. OODA loop for cyber range meets 16 of the 17 characteristics in the cyber range taxonomy. The final cyber range acceptance rate was 81.82%. The results of this acceptance give confidence that this new method can be used as an alternative to learning cybersecurity.