Research Projects

CAVE
Network Defense Training Center 2.0: The BSI's Modular Open-Source Training System
Start: 01/2025
End: 01/2027

On behalf of the BSI, the FZI is developing a modular open-source training system together with the act digital group for practical cybersecurity training in government agencies.
On behalf of the German Federal Office for Information Security (BSI), the FZI Research Center for Information Technology and the act digital group are developing a modular open-source platform for hands-on cybersecurity training for public-sector organizations.

The project builds on the existing Network Defense Training Center initiative and aims to provide realistic, practice-oriented cybersecurity training environments for government agencies.

At the core of the project is the CAVE platform, which enables the automated deployment of realistic training environments. The infrastructure is provisioned as Infrastructure-as-Code using OpenTofu on OpenStack. Each participant group operates within its own isolated environment, accessible via OpenVPN and a web browser. The source code is publicly available on openCode.

Based on this platform, modular training courses are being developed that combine theoretical instruction, live demonstrations, and practical exercises. Participants investigate vulnerabilities, misconfigurations, and attack paths in realistic scenarios from both offensive and defensive perspectives.

The training modules are designed around current cyber threat scenarios and cover topics such as Open-Source Intelligence (OSINT), web security, phishing, Active Directory, privilege escalation, and lateral movement techniques.

The first five-day training module combines introductory theory with guided demonstrations and hands-on exercises. Additional modules focusing on areas such as phishing and blue team operations are planned.

Thanks to its modular design, the training content can easily be adapted to different audiences and requirements.

Role of the FZI
FZI contributes its expertise in cybersecurity, cyber range infrastructures, and hands-on training methodologies to the project. Together with the act digital group, FZI has already developed initial training modules that have been used in multiple training sessions at the BSI and other federal authorities.

In the long term, the Network Defense Training Center 2.0 is also intended to support research, academic teaching, and professional training programs, helping strengthen digital resilience across public administration and society.

Contact person
Department Manager
Division: Cybersecurity and Law
Headquarters Karlsruhe

Research focus
Security and Resilience

Security and resilience for the digital future: Our research strengthens the cybersecurity, safety, and data protection of businesses and governments.

Illustration

Project partners:

Go to Top