Cyber Defence Exercises /

Locked Shields 2015


20 Apr 2015

Participation by invitation only


Locked Shields is a real-time network defence exercise, organised annually since 2010 by the NATO Cooperative Cyber Defence Centre of Excellence. The Estonian Cyber Range forms the backbone of the game-based exercise, with new attack vectors and technologies being introduced every year, in sync with market developments.

16 nations and NATO Computer Incident Response Capability participated as the Blue Teams of Locked Shields 2015. A total of 400 people were involved in the exercise. The training audience of the exercise were the national Blue Teams: computer emergency response specialists, playing the role of the rapid reaction teams of the fictional country of Berlya. The team from NATO Computer Incident Response Capability (NCIRC) came out as a winner, Estonia and Poland took second and third place respectively.

The largest of its kind globally, Locked Shields is unique in using realistic technologies, networks and attack methods. In 2015, new attack vectors included ICS/SCADA systems and Windows 8 and 10 operating systems, as well as an element of active defence. In addition to technical and forensic challenges, Locked Shields also includes media and legal injects. It thus provides insight into how complex a modern cyber defence crisis can be, and what is required from nations in order to be able to cope with these threats. 

Locked Shields 2015 was supported by the Government of Canada. The grant covered purchase of technical equipment for the NATO Cooperative Cyber Defence Centre of Excellence cyber lab and supporting services that allowed to increase the capacity of the annual Locked Shields cyber defence exercise.