© Armée luxembourgeoise
Every year, Luxembourg invites cyber security experts to their defence exercise which simulates seemingly real scenarios where the experts need to collaborate and defend their computer systems.
Luxembourg’s "Cyber Fortress" has become the country’s largest and most prominent national cyber defence exercise, drawing participation from multiple nations and organizations. This annual event, which first launched in 2021, provides a platform for participants from Belgium, Latvia, Luxembourg, Malta, as well as the European Union Cyber Rapid Response Teams (CRRT) and Mutual Assistance in Cyber Security, to enhance their skills in defending computer systems against real-time cyber attacks.
What started as a purely technical exercise has grown considerably over the years. Initially focused on honing technical skills, Cyber Fortress now includes a detailed, fictional yet realistic scenario to offer a more engaging and practical experience. The exercise emphasizes teamwork, communication, and crisis management in the face of escalating cyber threats.
Belgium has been an integral partner from the beginning, having participated in nearly every iteration of Cyber Fortress. This year, the event saw its expansion with a simultaneous exercise held in Latvia, where hundreds of participants joined the Luxembourg team to tackle the same cyber defence challenges. This collaboration underscores the deepening ties and cooperation between participating countries in the field of cyber security.
In addition to military forces, the exercise brought together key government agencies, including the Defence Directorate, the Luxembourg Army, the Luxembourg House of Cybersecurity, and the Judicial Police. These institutions worked alongside cyber security experts from across Europe to strengthen their response capabilities during cyber crises.
One of the standout features of this year’s exercise was the use of the “Luxembourg Cyber Range” platform, which allowed participants to engage in realistic cyber conflict scenarios. The platform was provided by the Defence Directorate to simulate various cyber attack scenarios, requiring participants to collaborate, coordinate actions, manage procedures, and swiftly react to mitigate attacks.
Cyber Fortress challenges participants with a series of coordinated cyber assaults, requiring them to manage IT services, respond effectively, and identify vulnerabilities in real-time. The exercise offers more than just technical training; it tests collaboration and communication skills across various cyber security teams, reinforcing the importance of seamless coordination in handling complex cyber incidents.
This year, one of the key technological challenges involved defending IT services supporting drones, adding another layer of complexity for the experts involved. In addition to the technical aspects, Cyber Fortress also delves into strategic and procedural concerns, with a focus on media communication and the growing threats posed by misinformation, fake news, and deepfakes. These evolving concerns highlight the exercise’s comprehensive approach to addressing not only the technical aspects of cyber security but also the broader socio-political implications of cyber attacks.
The exercise continues to provide valuable training for military personnel, government officials, and cyber security professionals, fostering knowledge exchange and improving the preparedness of participating teams. Cyber Fortress remains a vital event in strengthening Europe’s collective cyber defence capabilities, equipping experts with the tools and experience needed to respond effectively to the ever-growing threat of cyber attacks.
