Download the report with the training results
Cyber Polygon is an international online training aimed at increasing global cyber resilience.
In 2021, Cyber Polygon combined three tracks:
- Online conference for general public
- Technical training for corporate cybersecurity teams
- Expert track for field professionals featuring presentations by cybersecurity experts
We dedicated Cyber Polygon 2021 to secure ecosystem development.
Digital ecosystems perform billions of services each day — from making doctor’s appointments and communicating with family members to registering a business and managing finances. In this context, the resilience of supply chain networks is an issue of worldwide concern, as the vulnerability of a single organisation can undermine an entire supply system.
Top officials from ICANN, Mastercard, IBM, Microsoft and other international organisations also took part in the discussions. All recordings are available in the gallery.
Go to gallery
Russian cosmonauts discussed data protection in space and the prospects for international cooperation in the space industry.
The participants, as the Blue Teams, practised response to a targeted supply chain attack on a corporate ecosystem. The event organisers, acting as the Red Team, simulated the attack.
The training lasted 24 hours and included two scenarios:
- Defence, when the participants exercised their skills in repelling an ongoing large-scale attack on a business-critical system,
- Response, as the teams conducted a full-scale investigation of the incident using both traditional computer forensics techniques and the Threat Hunting approach.
In 2021, the technically-oriented audience was able to access the expert track featuring reports and presentations by practical experts from IBM, Microsoft, Kaspersky, Wallarm, and Netskope. All the materials are available in the gallery.
Go to gallery
Second- or third-time participants developed clear strategies for solving the tasks. Newcomers did not demonstrate any clear strategies.
When responding to real incidents, a working strategy will help save time and minimise damage. This is why training is so important.
This year, 85% of the teams managed to score points for the first scenario, while only 73% did so last year.
Presumably, more teams have developed their expertise in web application security analysis and protection.
In 2021, the teams found it more difficult to do classical digital forensic investigation than to collect telemetry from EDR agents and to apply the Threat Hunting approach.
Apparently, more organisations are now experienced in using the Threat Hunting method.
In 2021, the list of TOP 10 teams once again included representatives of IT and the banking sector. This time, however, some teams from the public sector also made the ranks. The latter were few, though, so it is too soon to draw any definitive conclusions just yet. Hopefully, we will see more of them the next year.
We invite you to join Cyber Polygon 2022.
Sign up for the newsletter and be the first to know the event date.