Using Digital Twin Technologies to Train Information Security Professionals

This paper explores the possibility of using digital twins of enterprise information systems, based on the Cyber polygon, to train Information Security students. The term “cyber polygon” is defined as a digital twin of the enterprise IT structure, allowing the implementation of various attack scenarios. A cyber polygon allows students to develop skills in eliminating vulnerabilities without harming real systems. The authors conducted a study with Information Security students to assess how cyber-range-based training affects their learning. Statistical analysis showed that second- and third-year students practiced scenarios as both the monitoring and response teams. Repeated practice significantly reduced the time to close vulnerabilities, but the same scenarios should not be overused to prevent memorization. Moreover, third-year students showed better results than second-years due to greater experience with the cyber range.