Cyber Defence Exercises /

Locked Shields 2016


18-22 Apr 2016

Participation by invitation only


Locked Shields 2016 is the biggest and most advanced international live-fire cyber defence exercise in the world. The annual scenario-based real-time network defence exercise, organised since 2010 by the Tallinn-based NATO Cooperative Cyber Defence Centre of Excellence, focuses on training the security experts who protect national IT systems on a daily basis. 

Over 550 people and a total of 26 nations are involved in Locked Shields 2016. 20 Blue Teams representing 19 nations and NATO Computer Incident Response Capability (NCIRC) participate in the exercise. 2016 is seeing a record number of joint teams. While the organizers of the exercise will gather in Tallinn, Estonia, the participating Blue Teams will have online access to the exercise networks and typically work from their home countries.

The Blue Teams are tasked to maintain the networks and services of a fictional country, Berylia under intense pressure. This includes handling and reporting incidents, solving forensic challenges as well as responding to legal, media and scenario injects.

Realistic technologies, networks and attack methods will be in the focus of Locked Shields 2016 to stay abreast with market developments. More than 1700 possible attacks are carried out against Blue Teams and over 1500 virtualised systems are deployed during Locked Shields 2016. The virtualized Blue Team networks are custom-built and include a variety of services and platforms. For example, the Blue Teams will have to maintain a number of servers, online services and an industrial control system.

Locked Shields 2016 is organised in cooperation with the Estonian Defence Forces, the Finnish Defence Forces, the Swedish Defence College, the British Army, the United States European Command, and numerous other partners.