Abstract
The growing complexity of cyber threats has exposed a critical gap between academic cybersecurity education and the operational demands of the workforce. This thesis presents a pilot study for a use-case of CyberNEST, a simulation-based training platform that integrates adversary emulation and threat-informed learning to create realistic, hands-on experiences for cybersecurity students.(17) The system was designed to replicate Security Operations Center (SOC) environments and incident response workflows, allowing participants to investigate, analyze, and respond to simulated attacks under authentic conditions. This pilot-study performed training simulations using the CyberNEST platform, developed by Brigham Young University, with students, collecting data from pre- and post-simulation surveys, as well as qualitative feedback. Findings indicated measurable improvements in students' self-reported familiarity and confidence across key cybersecurity competencies, including threat analysis, network defense, and the use of security tools such as SIEM and IDS/IPS systems. Participants also highlighted the simulation's effectiveness in fostering teamwork, situational awareness, and decision-making under pressure. The findings support the potential effectiveness of simulation-based adversary emulation as a bridge between conceptual instruction and applied practice. By situating learning within realistic cyber operations and demonstrates the possibility for a scalable and adaptable framework for enhancing the technical proficiency and operational readiness of future cybersecurity professionals.
Degree
MS
College and Department
Ira A. Fulton College of Engineering; Electrical and Computer Engineering
Rights
https://lib.byu.edu/about/copyright/
BYU ScholarsArchive Citation
Mott, Justin, "CyberNEST: A Step Forward for Training Cybersecurity Professionals" (2025). Theses and Dissertations. 11077.
https://scholarsarchive.byu.edu/etd/11077
Date Submitted
2025-12-18
Document Type
Thesis
Keywords
training, education, adversary emulation, cybersecurity
Language
english