{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,18]],"date-time":"2026-07-18T16:32:38Z","timestamp":1784392358469,"version":"3.55.0"},"reference-count":46,"publisher":"MDPI AG","issue":"6","license":[{"start":{"date-parts":[[2023,3,13]],"date-time":"2023-03-13T00:00:00Z","timestamp":1678665600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"ASCERT","award":["329062"],"award-info":[{"award-number":["329062"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>The use of IoT devices has increased rapidly in recent times. While the development of new devices is moving quickly, and as prices are being forced down, the costs of developing such devices also needs to be reduced. IoT devices are now trusted with more critical tasks, and it is important that they behave as intended and that the information they process is protected. It is not always the IoT device itself that is the target of a cyber attack, but rather, it can be a tool for another attack. Home consumers, in particular, expect these devices to be easy to use and set up. However, to reduce costs, complexity, and time, security measures are often cut down. To increase awareness and knowledge in IoT security, education, awareness, demonstrations, and training are necessary. Small changes may result in significant security benefits. With increased awareness and knowledge among developers, manufacturers, and users, they can make choices that can improve security. To increase knowledge and awareness in IoT security, a proposed solution is a training ground for IoT security, an IoT cyber range. Cyber ranges have received more attention lately, but not as much in the IoT field, at least not what is publicly available. As the diversity in IoT devices is large with different vendors, architectures, and components and peripherals, it is difficult to find one solution that fits all IoT devices. To some extent, IoT devices can be emulated, but it is not feasible to create emulators for all types of devices. To cover all needs, it is necessary to combine digital emulation with real hardware. A cyber range with this combination is called a hybrid cyber range. This work surveys the requirements for a hybrid IoT cyber range and proposes a design and implementation of a range that fulfills those requirements.<\/jats:p>","DOI":"10.3390\/s23063071","type":"journal-article","created":{"date-parts":[[2023,3,13]],"date-time":"2023-03-13T05:36:21Z","timestamp":1678685781000},"page":"3071","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":9,"title":["Hybrid IoT Cyber Range"],"prefix":"10.3390","volume":"23","author":[{"given":"Karl Edvard","family":"Balto","sequence":"first","affiliation":[{"name":"Department of Information Security and Communication Technology, Norwegian University of Science and Technology, 2815 Gj\u00f8vik, Norway"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5264-7613","authenticated-orcid":false,"given":"Muhammad Mudassar","family":"Yamin","sequence":"additional","affiliation":[{"name":"Department of Information Security and Communication Technology, Norwegian University of Science and Technology, 2815 Gj\u00f8vik, Norway"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Andrii","family":"Shalaginov","sequence":"additional","affiliation":[{"name":"School of Economics, Innovation and Technology, Kristiania University College, Kirkegata 24-26, 0153 Oslo, Norway"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0177-9496","authenticated-orcid":false,"given":"Basel","family":"Katt","sequence":"additional","affiliation":[{"name":"Department of Information Security and Communication Technology, Norwegian University of Science and Technology, 2815 Gj\u00f8vik, Norway"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2023,3,13]]},"reference":[{"key":"ref_1","unstructured":"NIST National Initiative for Cybersecurity Education (NICE) (2017). NICE One Pager for Cyber Ranges, NIST."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"101636","DOI":"10.1016\/j.cose.2019.101636","article-title":"Cyber ranges and security testbeds: Scenarios, functions, tools and architecture","volume":"88","author":"Yamin","year":"2020","journal-title":"Comput. Secur."},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Seljeseth, M., Yamin, M.M., and Katt, B. (2020). UIOT-FMT: A Universal format for collection and aggregation of data from smart devices. Sensors, 20.","DOI":"10.20944\/preprints202010.0029.v1"},{"key":"ref_4","unstructured":"(2022, May 04). 49 Stunning Internet of Things Statistics 2022 [The Rise Of IoT]. Available online: https:\/\/techjury.net\/blog\/internet-of-things-statistics\/."},{"key":"ref_5","first-page":"85","article-title":"The Mirai Botnet and the Importance of IoT Device Security","volume":"Volume 800","author":"Latifi","year":"2019","journal-title":"16th International Conference on Information Technology-New Generations (ITNG 2019)"},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Vykopal, J., Vizvary, M., Oslejsek, R., Celeda, P., and Tovarnak, D. (2017, January 18\u201321). Lessons learned from complex hands-on defence exercises in a cyber range. Proceedings of the 2017 IEEE Frontiers in Education Conference (FIE), Indianapolis, IN, USA.","DOI":"10.1109\/FIE.2017.8190713"},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"14053","DOI":"10.1007\/s11227-021-03825-1","article-title":"Smart home security: Challenges, issues and solutions at different IoT layers","volume":"77","author":"Touqeer","year":"2021","journal-title":"J. Supercomput."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"439","DOI":"10.1007\/978-3-030-78642-7_59","article-title":"An IOT Security Awareness and System Hardening Advisory Platform for Smart Home Devices","volume":"Volume 1420","author":"Stephanidis","year":"2021","journal-title":"HCI International 2021\u2014 Posters"},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"102442","DOI":"10.1016\/j.ijinfomgt.2021.102442","article-title":"Internet of Things (IoT): From awareness to continued use","volume":"62","author":"Koohang","year":"2022","journal-title":"Int. J. Inf. Manag."},{"key":"ref_10","unstructured":"P\u00e4ij\u00e4nen, J., Saharinen, K., Salonen, J., Sipola, T., and Vykopal, J. (2021, January 24\u201325). Cyber Range: Preparing for Crisis or Something Just for Technical People?. Proceedings of the 20th European Conference on Cyber Warfare and Security, ECCWS 2021, Athens, Greece."},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Schwab, S., and Kline, E. (2019, January 17\u201319). Cybersecurity Experimentation at Program Scale: Guidelines and Principles for Future Testbeds. Proceedings of the 2019 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW), Stockholm, Sweden.","DOI":"10.1109\/EuroSPW.2019.00017"},{"key":"ref_12","first-page":"34","article-title":"Preparing for cybergeddon","volume":"33","author":"Keggler","year":"2009","journal-title":"Armada Int."},{"key":"ref_13","unstructured":"Davis, J., and Magrath, S. (2023, March 08). A Survey of Cyber Ranges and Testbeds. Available online: https:\/\/www.semanticscholar.org\/paper\/A-Survey-of-Cyber-Ranges-and-Testbeds-Executive-Davis-Magrath\/687ff7737f9e32b85cf885db88341b73892aa8ae."},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Yamin, M.M., Katt, B., Torseth, E., Gkioulos, V., and Kowalski, S.J. (2018, January 21\u201323). Make it and Break it: An IoT Smart Home Testbed Case Study. Proceedings of the 2nd International Symposium on Computer Science and Intelligent Control, Stockholm, Sweden.","DOI":"10.1145\/3284557.3284743"},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"102635","DOI":"10.1016\/j.cose.2022.102635","article-title":"Modeling and executing cyber security exercise scenarios in cyber ranges","volume":"116","author":"Yamin","year":"2022","journal-title":"Comput. Secur."},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Vykopal, J., and O\u0161lej\u0161ek, R. (2017). KYPO Cyber Range: Design and Use Cases, ResearchGate.","DOI":"10.5220\/0006428203100321"},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Kavallieratos, G., Katsikas, S.K., and Gkioulos, V. (2019, January 8). Towards a cyber-physical range. Proceedings of the CPSS \u201919: Proceedings of the 5th on Cyber-Physical System Security Workshop, Auckland, New Zealand.","DOI":"10.1145\/3327961.3329532"},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Chouliaras, N., Kittes, G., Kantzavelou, I., Maglaras, L., Pantziou, G., and Ferrag, M.A. (2021). Cyber Ranges and TestBeds for Education, Training, and Research. Appl. Sci., 11.","DOI":"10.3390\/app11041809"},{"key":"ref_19","first-page":"16","article-title":"Developing a Security Testbed for Industrial Internet of Things","volume":"8","author":"Sitnikova","year":"2021","journal-title":"IEEE Internet Things J."},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Munoz, J., Rincon, F., Chang, T., Vilajosana, X., Vermeulen, B., Walcarius, T., van de Meerssche, W., and Watteyne, T. (May, January 29). OpenTestBed: Poor Man\u2019s IoT Testbed. Proceedings of the IEEE INFOCOM 2019\u2014IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS), Paris, France.","DOI":"10.1109\/INFCOMW.2019.8845269"},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Nock, O., Starkey, J., and Angelopoulos, C.M. (2020). Addressing the Security Gap in IoT: Towards an IoT Cyber Range. Sensors, 20.","DOI":"10.3390\/s20185439"},{"key":"ref_22","first-page":"77","article-title":"ForCyRange: An Educational IoT Cyber Range for Live Digital Forensics","volume":"Volume 650","author":"Drevin","year":"2022","journal-title":"Information Security Education\u2014Adapting to the Fourth Industrial Revolution"},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Oh, S.K., Stickney, N., Hawthorne, D., and Matthews, S.J. (2020, January 7\u20139). Teaching Web-Attacks on a Raspberry Pi Cyber Range. Proceedings of the 21st Annual Conference on Information Technology Education, Online.","DOI":"10.1145\/3368308.3415364"},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Sharifi, A.Z., Vanijja, V., Pal, D., and Anantasabkit, W. (2021, January 1\u20133). CyberIoT: An Initial Conceptualization of a Web-based Cyber Range for IoT. Proceedings of the 2021 International Conference on Computational Performance Evaluation (ComPE), Shillong, India.","DOI":"10.1109\/ComPE53109.2021.9752401"},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"e3446","DOI":"10.1002\/dac.3446","article-title":"Testbed@TWISC: A network security experiment platform","volume":"31","author":"Tsai","year":"2018","journal-title":"Int. J. Commun. Syst."},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Berhanu, Y., Abie, H., and Hamdi, M. (2013, January 8\u201312). A testbed for adaptive security for IoT in eHealth. Proceedings of the International Workshop on Adaptive Security\u2014ASPI \u201913, Zurich, Switzerland.","DOI":"10.1145\/2523501.2523506"},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Mallouhi, M., Al-Nashif, Y., Cox, D., Chadaga, T., and Hariri, S. (2011, January 17\u201319). A testbed for analyzing security of SCADA control systems (TASSCS). Proceedings of the ISGT 2011, Anaheim, CA, USA.","DOI":"10.1109\/ISGT.2011.5759169"},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"101648","DOI":"10.1016\/j.cose.2019.101648","article-title":"Design and implementation of automated IoT security testbed","volume":"88","author":"Bettayeb","year":"2020","journal-title":"Comput. Secur."},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/2981546","article-title":"Advanced Security Testbed Framework for Wearable IoT Devices","volume":"16","author":"Siboni","year":"2016","journal-title":"ACM Trans. Internet Technol."},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Johannesson, P., and Perjons, E. (2014). An Introduction to Design Science, Springer International Publishing. [1st ed.].","DOI":"10.1007\/978-3-319-10632-8"},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Karjalainen, M., Puuska, S., and Kokkonen, T. (2020, January 23\u201326). Measuring Learning in a Cyber Security Exercise. Proceedings of the 2020 12th International Conference on Education Technology and Computers, London, UK.","DOI":"10.1145\/3436756.3437046"},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Ukwandu, E., Farah, M.A.B., Hindy, H., Brosset, D., Kavallieros, D., Atkinson, R., Tachtatzis, C., Bures, M., Andonovic, I., and Bellekens, X. (2020). A Review of Cyber-Ranges and Test-Beds: Current and Future Trends. Sensors, 20.","DOI":"10.3390\/s20247148"},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Shalaginov, A., and Gr\u00f8nli, T.M. (2021, January 15\u201318). Securing Smart Future: Cyber Threats and Intelligent Means to Respond. Proceedings of the 2021 IEEE International Conference on Big Data (Big Data), Orlando, FL, USA.","DOI":"10.1109\/BigData52589.2021.9671703"},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"108952","DOI":"10.1109\/ACCESS.2020.2998358","article-title":"Digital Twin: Enabling Technologies, Challenges and Open Research","volume":"8","author":"Fuller","year":"2020","journal-title":"IEEE Access"},{"key":"ref_35","doi-asserted-by":"crossref","unstructured":"Zaddach, J., Bruno, L., Francillon, A., and Balzarotti, D. (2014, January 23\u201326). Avatar: A Framework to Support Dynamic Security Analysis of Embedded Systems\u2019 Firmwares. Proceedings of the 2014 Network and Distributed System Security Symposium, San Diego, CA, USA.","DOI":"10.14722\/ndss.2014.23229"},{"key":"ref_36","unstructured":"(2023, February 16). JTAG\u2014Wikipedia. Available online: https:\/\/en.wikipedia.org\/wiki\/JTAG."},{"key":"ref_37","unstructured":"(2022, May 23). The Serial Wire Debug Port\u2014Documentation\u2014Arm Developer. Available online: https:\/\/developer.arm.com\/documentation\/ihi0031\/a\/The-Serial-Wire-Debug-Port\u2013SW-DP-\/Introduction-to-the-ARM-Serial-Wire-Debug\u2013SWD\u2013protocol."},{"key":"ref_38","doi-asserted-by":"crossref","unstructured":"Mackey, S., Mihov, I., Nosenko, A., Vega, F., and Cheng, Y. (2020, January 16\u201318). A Performance Comparison of WireGuard and OpenVPN. Proceedings of the Tenth ACM Conference on Data and Application Security and Privacy, New Orleans, LA, USA.","DOI":"10.1145\/3374664.3379532"},{"key":"ref_39","doi-asserted-by":"crossref","unstructured":"Kim, M., Kim, D., Kim, E., Kim, S., Jang, Y., and Kim, Y. (2020, January 6\u201310). FirmAE: Towards Large-Scale Emulation of IoT Firmware for Dynamic Analysis. Proceedings of the Annual Computer Security Applications Conference, Austin, TX, USA.","DOI":"10.1145\/3427228.3427294"},{"key":"ref_40","doi-asserted-by":"crossref","unstructured":"Chen, D.D., Egele, M., Woo, M., and Brumley, D. (2016, January 21\u201324). Towards Automated Dynamic Analysis for Linux-based Embedded Firmware. Proceedings of the 2016 Network and Distributed System Security Symposium, San Diego, CA, USA.","DOI":"10.14722\/ndss.2016.23415"},{"key":"ref_41","unstructured":"Feng, B., Mera, A., and Lu, L. (2020, January 12\u201314). P2IM: Scalable and Hardware-independent Firmware Testing via Automatic Peripheral Interface Modeling. Proceedings of the 29th USENIX Conference on Security Symposium, Boston, MA, USA."},{"key":"ref_42","unstructured":"Osman, G.O. (2019). Emulating the Internet of Things with QEMU. [Master\u2019s Thesis, Chalmers University of Technology]."},{"key":"ref_43","unstructured":"Curtis, B. (2022, May 03). GitHub\u2014Fmstrat\/diy-ipmi: A DIY IPMI\/IP KVM System Utilizing the Raspberry Pi. Available online: https:\/\/github.com\/Fmstrat\/diy-ipmi."},{"key":"ref_44","unstructured":"(2022, May 29). WB2S\/BK7231 Tutorial\u2014Writing Custom Firmware\u2014UDP\/TCP\/HTTP\/MQTT. Available online: https:\/\/www.elektroda.com\/rtvforum\/topic3850712.html."},{"key":"ref_45","unstructured":"Fain, N. (2022, May 18). GitHub\u2014Cyphunk\/JTAGenum: Given an Arduino Compatible Microcontroller or Raspberry PI (Experimental), JTAGenum Scans Pins[] for Basic JTAG Functionality and can be Used to Enumerate the Instruction Register for Undocumented Instructions. Props to JTAG Scanner and Arduinull Which Came Before JTAGenum and Forwhich Much of the Code and Logic is Based on. Feel Free to Branch and Modify Religiously (Readme, Credits, Whatever). Available online: https:\/\/github.com\/cyphunk\/JTAGenum."},{"key":"ref_46","unstructured":"(2020, November 08). Mirai-Source-Code\/ForumPost.md at master \u00b7 jgamblin\/Mirai-Source-Code \u00b7 GitHub. Available online: https:\/\/github.com\/jgamblin\/Mirai-Source-Code\/blob\/master\/ForumPost.md."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/23\/6\/3071\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T18:53:40Z","timestamp":1760122420000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/23\/6\/3071"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,3,13]]},"references-count":46,"journal-issue":{"issue":"6","published-online":{"date-parts":[[2023,3]]}},"alternative-id":["s23063071"],"URL":"https:\/\/doi.org\/10.3390\/s23063071","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,3,13]]}}}