Inside RISE: He prepares companies and government agencies for cyberattacks
Step inside RISE’s testbed Cyber Range in Kista – a place where companies and government agencies can train their ability to handle cyberattacks in a protected environment.
The screen suddenly glows blue. The power system seems to be down. An alarm blares, deafeningly loud. We are visiting RISE’s testbed Cyber Range in Kista. A place where companies and government agencies can train their ability to handle cyberattacks in a protected environment.
“We mainly collaborate with Sweden’s high-tech industries,” says Andreas Aurelius, Head of Cybersecurity Research at RISE.
Entering Cyber Range
Sixteen black computer stations are aimed at massive screens on the wall ahead. Behind us are small control rooms. Here, hackers can orchestrate their attacks on critical infrastructure.
Five minutes before the alarm went off, mobile phones, car keys, and jackets were placed in numbered lockers, opened with individually issued access cards. The card is then scanned again, followed by a unique four-digit code to enter an airlock, only to repeat the same procedure once more.
Cyber Range is a training arena where researchers, IT managers, developers, and students can deepen their understanding of today’s digital threat landscape.
A testbed for digital resilience
Cyber Range is RISE’s own testbed in Kista. The term is inspired by driving ranges or shooting ranges: a protected space to develop skills. Several similar facilities exist across Europe.
“We mainly collaborate with high-tech Swedish industries,” says Andreas Aurelius.
Government agencies, municipalities, and energy companies also come here to train their capabilities, explore vulnerabilities, or run penetration tests (“pentests”). Either on electronics, connected IoT devices, or entire digital systems. In the latter case, teams build a digital twin and expose it to various intrusion attempts behind thick, shielded walls.
“Sometimes it’s about ensuring compliance with the EU’s latest cybersecurity regulations. But often the purpose is to identify vulnerabilities early from a business-critical perspective. Recently, we ran a training session for a municipality where participants – whether technical staff or senior management – conducted relevant exercises together. It gives both leadership and operational teams hands-on experience in handling realistic incidents before they happen.”
Applied research
Outside the testbed, in an office on the sixth floor of the Electrum building, about 100 RISE researchers work. Around 20 of them belong to the cybersecurity unit.
It’s clear that RISE plays an active role in Sweden’s expanding cybersecurity ecosystem. Beyond Cyber Range, they coordinate the Cybernode, a network of nearly 400 member organizations, as well as Cybercampus, a national initiative which enables academic collaboration in research and education together with partners like KTH.
“We have a cohesive research team with extremely high expertise in cybersecurity. Our other activities have gradually emerged from this research base,” says Aurelius as we return to his office.
But research takes time. So how do they stay up-to-date in a field where attackers always seem one step ahead?
“We don’t conduct basic research. Almost everything we do, we do in collaboration with industry players. It’s very valuable to bring in organizations that want their products and systems stress-tested. This ensures we always stay current with the latest technology.”
Kista as a telecom hub
During our visit, RISE is in an intense period of applying for various EU projects. In total, the unit is part of around ten project proposals. These are typically carried out in consortia, meaning 10-30 organizations may stand behind a single application.
“We apply as a group, but the funds are then distributed to each organization. EU projects that receive approval typically start nine months later.”
Why base the operation in Kista?
“Kista has always been shaped by its proximity to high-tech companies. Ericsson has been incredibly influential, and over the years many other players have had their research and innovation departments here.”
Aurelius points out that the district is in constant transformation. Kista Science City runs the Sweden Secure Tech Hub network. They have also launched the Trust My Tech accelerator together with the global resilience giant Thales.
“Kista is undergoing a kind of transformation. Many exciting companies are moving in now, both in deeptech and cybersecurity. And there is a lot of focus on cybersecurity in the area.”
Do you notice the topic of cybersecurity moving higher on the agenda?
“Yes, absolutely. Resilience has become a crucial concept – and justifiably so. We can see how society can be attacked in many ways through new forms of hybrid warfare. And they don’t always involve overt acts of aggression. Knowledge of cybersecurity and resilience is becoming increasingly valuable for both the private and public sectors.”
Learn more about what’s waiting for you in Kista
From labs to lunch, Kista is where innovation meets everyday life.
