Impact Report 2024-2025
“CiberLab
is a platform designed to pave the way for something greater: a future national cyber defense center that brings together technological capabilities, human talent, shared standards, and a strategic vision, whose impact will extend across the country and the region”.
JUAN CARLOS DE LA LLERA M. PRESIDENT PONTIFICIA UNIVERSIDAD CATÓLICA DE CHILE
TRAINING AND SKILLS DEVELOPMENT
“CiberLab tackles challenges that strengthen the country’s competitiveness, developing solutions that incorporate security by design”.
Since its inception, the UC Anacleto Angelini Innovation Center has made collaboration between academia, the public sector, and private industry a cornerstone of its work. In that spirit, we are proud to celebrate CiberLab’s first year, an initiative that reflects our vision of creating spaces where innovation serves the nation’s strategic priorities.
CiberLab serves as a hub to strengthen national cyber defense- offering specialized infrastructure, emerging technologies, and training models that build the skills needed to face increasingly complex cyber threats. Over the past year, we have seen how collaboration can translate into tangible progress in protecting the critical systems and networks that underpin our society.
At the Center, we aim to create an ecosystem that supports innovative solutions through excellence, collaboration, and responsibility. We take on challenges that boost the country’s competitiveness, promote forward-looking territorial development, and integrate emerging
and enabling trends such as robotics, advanced AI, and smart cities- always embedding security into the design from the outset. CiberLab is a testament to this purpose, illustrating how coordinated efforts between diverse stakeholders can yield long-term strategic capabilities.
We are thankful to all who have supported this project and contributed to its progress. We will continue working tirelessly to establish CiberLab as a national and international benchmark in cybersecurity, moving toward a safer, more resilient society prepared for the challenges ahead.
RAMÓN MOLINA C. EXECUTIVE DIRECTOR
UC ANACLETO ANGELINI INNOVATION CENTER
TRAINING AND SKILLS DEVELOPMENT
“Our work goes beyond operational matters, it extends to building capabilities in new domains, coordinating efforts with academic and technological partners such as CiberLab”.
CiberLab marks a transformative milestone for Chile in the development of national capabilities to address the complex and rapidly evolving spectrum of cyber threats. The Chilean Army has spearheaded a pioneering initiative that brings together defense, academia, industry, and the government around a shared mission: protecting our critical infrastructure through expertise, collaboration, and technological innovation.
In our first year, we have contributed to tangible progress in strengthening national resilience. These activities made it possible to validate strategic decision-making models, reinforce operational capabilities, and promote collaboration in highly complex scenarios.
With institutional support, we conducted strategic and technical exercises using physical simulators for critical infrastructure, enabling the practical application of technical skills in controlled environments. We also provided training to more than 320 personnel in areas such as cyber defense, auditing, network administration, and analysis.
The Army’s collaborative work has been essential in planning, executing, and evaluating each projected scenario, reinforcing our operational readiness for high-demand situations. International partners have played a crucial role in providing access to emerging
technologies and global trends that strengthen national capabilities, while academic collaboration has built a critical mass of experts ready to expand defense into new domains.
Firmly believing in the Army’s role as a strategic driver of national competitiveness and defense capabilities, we have taken on the responsibility of putting into practice the solutions generated by this interinstitutional initiative. We work in close coordination with other stakeholders responsible for safeguarding critical infrastructure. This is a forward-looking challenge: we aim to continue creating collaborative spaces to pilot, test, and integrate enabling emerging technologies.
Artificial intelligence is already reshaping the military landscape through decision-support systems, predictive threat analysis, and the automation of logistical and operational processes. These advances not only strengthen our operational capacity but also fuel academic progress, benefiting the professional training of future officers and non-commissioned officers through CiberLab.
At the same time, international organizations are exploring quantum computing and navigation to improve the precision of positioning systems, secure communications, and advanced sensors.
TRAINING AND SKILLS DEVELOPMENT
Experimental connectivity technologies, such as LPI/LPD (Low Probability of Intercept/Detection) networks and space-based optical communication systems, are maturing and hold the potential to revolutionize multidomain operations, which integrate simultaneous and coordinated capabilities across land, air, sea, space, cyber, and the electromagnetic spectrum.
This technological convergence aims to enhance tactical interoperability for faster, more synchronized, and resilient responses to complex scenarios and hybrid threats. Our institution seeks to integrate these technology streams into environments like CiberLab by scaling capabilities and incorporating new stakeholders into the national critical infrastructure ecosystem. Our goal is to continue this path of progress, explore new technological frontiers, and strengthen alliances that reinforce national resilience in the face of present and future challenges in cyberspace.
For the Chilean Army, this initiative is far more than a technology project. It is a concrete demonstration of our enduring commitment to national security, technological sovereignty, interinstitutional cooperation, and strategic innovation in the service of the country.
MG CRISTIAN GUEDELHOEFER E.
MAJOR GENERAL COMMANDER OF THE EDUCATION AND DOCTRINE COMMAND CHILEAN ARMY
“Cybersecurity is everyone’s responsibility! This first year has proven that interdisciplinary, cross-sector collaboration is essential to strengthening Chile’s cyber defense capabilities”.
One year after CiberLab was established, the Duoc UC School of Computer Science and Telecommunications celebrates its role as a founding partner of this strategic initiative, alongside the Chilean Army and the Pontificia Universidad Católica de Chile.
This first year has proven that interdisciplinary, cross-sector collaboration is essential to strengthening Chile’s cyber defense capabilities. From a technical–professional perspective, Duoc UC has contributed applied training, young talent, and concrete projects that have had a significant impact in simulation environments, pilot programs, and the development of real technological solutions.
Exercises such as live simulations of cyberattacks on critical infrastructure have provided valuable training opportunities, where our students and faculty worked side-by-side with experts from the defense, academic, and private sectors. This experience not only strengthens our graduates’ employability but also makes a direct contribution to society.
We are deeply grateful to all who made this first year of achievements possible. We will continue forward -guided by responsibility, a vision for the future, and a passion for innovation -to help build a national cybersecurity ecosystem that is resilient, inclusive, and ready to meet the challenges of the 21st century.
ALEJANDRA ACUÑA V.
DIRECTOR OF THE DUOC UC SCHOOL OF COMPUTER SCIENCE AND TELECOMMUNICATIONS
TRAINING AND SKILLS DEVELOPMENT
CiberLab´s Founding Partners
ROCÍO ORTIZ
DEPUTY DIRECTOR OF FUTURE
INDUSTRIES AND EXECUTIVE DIRECTOR OF CIBERLAB UC ANACLETO ANGELINI INNOVATION CENTER
MABEL LEVA
EXECUTIVE DIRECTOR CONECTA LOGÍSTICA
MG CRISTIAN GUEDELHOEFER
MAJOR GENERAL COMMANDER OF THE EDUCATION AND DOCTRINE COMMAND CHILEAN ARMY
PATRICIO LEYTON DIRECTOR OF CYBERSECURITY AND CRITICAL INFRASTRUCTURE NATIONAL ELECTRICAL COORDINATOR
SALVADOR VIAL
PRINCIPAL EXECUTIVE SECURITY ADVISOR AWS
CRISTIÁN VEGA OPERATIONS AND TECHNOLOGY MANAGER CHILEAN ASSOCIATION OF BANKS AND FINANCIAL INSTITUTIONS
FELIPE BAHAMONDES
GENERAL MANAGER DICTUC
STRATEGIC ALLIANCES LATAM DIRECTOR
DREAMLAB TECHNOLOGIES LATAM RODRIGO RÍOS
ALEJANDRA ACUÑA
DIRECTOR OF THE SCHOOL OF COMPUTER SCIENCE AND TELECOMMUNICATIONS
DUOC UC
FRANCISCO GUZMÁN
PRESIDENT OF ACTI, VICE PRESIDENT OF CLARO EMPRESAS
CLAUDIO ALCOTA
DEPUTY DIRECTOR OF PROJECTS SCHOOL OF COMPUTER SCIENCE AND TELECOMMUNICATIONS
DUOC UC
ALFREDO ROLANDO
DIGITAL INDUSTRIES CYBERSECURITY REGIONAL MANAGER SIEMENS
MAURICIO RAMÍREZ COUNTRY MANAGER CHILE PALO ALTO NETWORKS
MATÍAS ARÁNGUIZ DEPUTY DIRECTOR OF THE LAW, SCIENCE, AND TECHNOLOGY PROGRAM
UC | CHILE
CiberLab’s partners
Index
CiberLab: context and vision for the future
The Cyber Defense Laboratory for the Protection of Critical Infrastructure (CiberLab) is an initiative led by the UC Innovation Center and the Chilean Army, in collaboration with representatives from the public, private, and academic sectors. Its goal is to create a neutral, collaborative space to address the cybersecurity and cyber defense challenges facing the nation’s critical infrastructure.
Following the enactment of the Cybersecurity Framework Law, several urgent priorities have emerged: developing practical, flexible, ongoing, up-to-date, and tailored training programs; creating
sandboxes and testing environments; and establishing collaborative models with other ecosystem stakeholders to share experiences and best practices.
Against this backdrop, CiberLab was launched in July 2024 with the mission of strengthening the maturity and resilience of both public and private critical sectors. This is achieved through joint efforts in four key lines of action: training, pilot projects, outreach, and shared infrastructure. The diagram below outlines CiberLab’s four collaborative lines of action with its partners.
STRUCTURE AND LINES OF ACTION
“There is still much progress to be made. As the initiative enters its second year, the focus is on integrating advanced human capital more deeply, developing impactful R&D projects, and strengthening simulation and technology experimentation environments to enhance national security”.
“Over the course of the first year, we have built an ecosystem that brings together key stakeholders from the country’s critical infrastructure sectors around a shared, strategic vision for the future: a mature and resilient nation that addresses cyber threats and risks through agile collaborative models. Looking ahead, we plan to scale this collaborative hub into a decentralized national model, extending our portfolio of training, technology, and knowledge across industries and regions. This will position CiberLab not only as a national center but as a regional hub of talent and technology for cyber defense”.
COL. ROBERTO CASTILLO HEAD OF CIITEC CHILEAN ARMY
ROCÍO ORTIZ CIBERLAB EXECUTIVE DIRECTOR
CiberLab’s founding partners at the ribbon-cutting ceremony.
Shared spaces and infrastructure
CiberLab provides advanced facilities and technological resources, such as sandboxes and laboratories, enabling applied research, training, and collaboration among public, private, and academic stakeholders.
TRAINING AND SKILLS DEVELOPMENT
Ribbon-cutting at the opening ceremony of CiberLab. From left to right: Marcela Briones (Director of Corporate Affairs and Communications Director,
Innovation Center), Rodrigo Ríos (Director of Strategic Alliances Director LATAM, DreamLab Technologies
General Division, Cristian Guedelhoefer (Major General Commander of the Education and Doctrine Command, Chilean Army), Pedro Bouchón (former Vice President for Research, UC), Cristián Vega (Operations and Technology Manager, ABIF), Alejandra Acuña (Director, School of Computer Science and Telecommunications Director, Duoc UC), and Ramón Molina (Executive Director, UC Anacleto Angelini Innovation Center).
“One of our university’s key missions and a priority championed by our University President, is to serve as a national hub for technologies and pilot programs that strengthen our country’s security, recognizing the profound impact of the work carried out by the CiberLab team”.
MARÍA ANGÉLICA FELLENBERG VICE PRESIDENT FOR RESEARCH AND POSTGRADUATE STUDIES
UC |
CHILE
UC Anacleto Angelini
LATAM), Mabel Leva (Executive Director, Conecta Logística),
AND SKILLS DEVELOPMENT
Opening
ceremony
On July 30, 2024, the Cyber Defense Laboratory for the Protection of Critical Infrastructure (CiberLab) was inaugurated to offer shared infrastructure, resources, and a collaborative partnership model. Its mission is to advance applied research, provide specialized training, and facilitate knowledge transfer among public, private, and academic stakeholders to tackle the country’s cybersecurity and cyber defense challenges.
The lab features a collaborative workspace equipped with hardware and software for technology pilot programs and proof-of-concept testing. It includes high-performance workstations for advanced processing and analysis, as well as specialized infrastructure -such as sensors, controllers, and industrial automation systems -used to test scale models and simulators with a focus on IT/OT integration.
CiberLab’s software capabilities emphasize threat intelligence analysis and the processing of compromise indicators. The lab also allows exploration across all layers of the cybersecurity framework, from threat identification to protection, detection, response, and postincident recovery.
In addition to core hardware and software, complementary tools have been integrated to address security challenges. Key enabling and emerging technologies include artificial intelligence (AI), machine learning (ML), advanced data analytics, quantum technologies, unmanned aerial vehicles (drones), and experimental 5G and 5.5G connectivity, among others.
panel “Public-Private Challenges in Cyber Defense and Critical Infrastructure Protection”, held during the opening ceremony, featured representatives from the Mining Cybersecurity Corporation, the National Electric Coordinator, the Association of Banks and Financial Institutions, the Chilean Army, and the UC Innovation Center.
CiberLab’s founding partners at the ribbon-cutting ceremony.
Development of CTF simulator scale models.
The
Two cyber defense nodes
CiberLab operates under a dual innovation model, integrating the challenges of the civil, private, and public sectors with defensefocused responses to cyber threats. The lab is designed as a collaborative space spanning 100 m², featuring two cyber defense nodes: one dedicated to work by the Chilean Army in partnership with the UC Innovation Center, and the other shared among the lab’s founding members and the Center. This arrangement facilitates the development of specialized work portfolios and collaboration between the two nodes.
CiberLab’s cyber defense nodes are connected to the UC Anacleto Angelini Innovation Center’s Emerging Technologies HUB, including the 5.5G Experimental Connectivity Laboratory, the Conecta Móvil Lab Consortium, FabLab, and the Creative Industries Laboratory. These connections expand the laboratory’s capabilities for exploring interdisciplinary and multi-platform use cases. The UC nodes are also linked to Duoc UC’s national laboratory network, enabling crossinstitutional collaboration and talent sharing.
Duoc UC laboratory and talent network
The Duoc UC Center for Innovation and Technology Transfer (CITT) is a collaborative space that promotes innovation, applied research, and engagement with industry, strengthening students’ practical training. Operating across six locations and two campuses in the Valparaíso, Metropolitana, Biobío, and Los Lagos regions, it provides advanced technological equipment and contributes a network of laboratories to CiberLab.
Additionally, CiberVoluntarios is a volunteer network that fosters a culture of cybersecurity and responsible digital device use. It brings together students, faculty, alumni, and public- and private-sector partners to educate and support children, youth, older adults, and vulnerable communities, strengthening their confidence and safety in digital environments.
Duoc UC Teams at the Llaitún 2024 exercise.
Duoc UC Center for Innovation and Technology Transfer, Viña del Mar.
Duoc UC Center for Innovation and Technology Transfer, Concepción.
Chilean Army and Universidad Católica strengthen strategic alliance at UC Innovation Center
As one of CiberLab’s central nodes, the Chilean Army and UC have developed, through their academic collaboration agreement, a Cyber Defense Laboratory specialized in addressing the institution’s specific challenges and opportunities in this field. This node features a portfolio of pilot initiatives, projects, and training programs tailored to its teams. It also collaborates with other ecosystem stakeholders, sharing experience and knowledge to address common issues related to emerging threats.
“The achievements and progress of this partnership are directly linked to national security and the enhancement of our country’s capabilities to face increasingly sophisticated threats. For this reason, CiberLab remains a key component in the growth and specialization that many of our military personnel have developed during this period”.
“CiberLab is a platform designed to pave the way for something greater: a future national cyber defense center that brings together technological capabilities, human talent, shared standards, and a strategic vision, whose impact will extend across the country and the region”.
JUAN CARLOS DE LA LLERA PRESIDENT
UC CHILE
ARMY GENERAL JAVIER ITURRIAGA DEL CAMPO COMMANDER-IN-CHIEF OF THE CHILEAN ARMY
The Commander-in-Chief of the Chilean Army, General Javier Iturriaga del Campo, and UC President Juan Carlos de la Llera visiting CiberLab on May 22, 2025. They were joined by Ramón Molina (Executive Director, UC Anacleto Angelini Innovation Center), María Angélica Fellenberg (UC | Chile Vice President for Research and Postgraduate Studies), and Loreto Valenzuela (Dean of UC Engineering).
CiberLab’s first year
2024
CiberLab aims to strengthen the cybersecurity and cyber defense of the country’s critical infrastructure, fostering a collaborative and neutral environment where experts and organizations can work together to protect essential systems.
During its first year of operations, CiberLab has engaged over:
+1.000 participants
+150 institutions in technical and strategic activities and exercises
+320 military personnel trained
+50 students involved in pilot projects academics, researchers, and
July
30
Ribbon-cutting at the opening ceremony of CiberLab
October 2
Cyberwarfare seminar: current scenario and trends
AND SKILLS DEVELOPMENT
October 22
Strategic exercise: crisis scenarios, critical infrastructure, and decision-making
October 22
Llaitún 2024 cyber defense exercise: IT/OT defense simulation
November 25
2nd Cybersecurity summit: technology and success stories in critical infrastructure protection
November 26
OT cybersecurity workshop
May 22
The Commander-in-Chief of the Chilean Army and the UC president visit CiberLab
July 23
CTF Llaitún 2025: OT warrior edition
AND PROOF-OF-CONCEPT TRIALS
Projects, pilot initiatives, and proofof-concept trials
It enables the development of technological innovations and the implementation of pilot cyber defense solutions for critical infrastructure, fostering an environment for experimentation and validation.
TRAINING AND SKILLS DEVELOPMENT
Threat Intelligence Analysis
Within the Threat Intelligence research line, during 2024 the Chilean Army, together with the UC team and partners, developed compromise indicator analyses by integrating the MISP and OPEN CTI platforms. This initiative provides tactical and strategic insights into trends, actors, and threats. It enables tracking of campaigns, identification of attack patterns, and supports risk management and decisionmaking processes.
This first pilot project serves as the cornerstone for developing CiberLab’s Threat Intelligence Analysis Unit, with a strong focus on integrating artificial intelligence and advanced data analytics applied to cybersecurity.
Objectives of this unit include:
1. Developing capabilities to integrate heterogeneous data sources into a centralized environment.
2. Incorporating AI, machine learning, and advanced correlation techniques for early detection of threats and anomalous patterns.
3. Promoting research on emerging threats and AI in the context of cyber defense.
This data analysis capability will allow future project phases to detect malicious behavior patterns using: supervised models (trained on pre-classified IOCs to identify similar new threats) and unsupervised models (identifying clusters of anomalous behavior).
Stages of advanced analysis using AI and sophisticated data models, projected for future research lines
Development and optimization of advanced techniques in malware analysis
Cyber intelligence units face a constant challenge in identifying and mitigating threats from malware and advanced malicious vectors that could compromise not only critical infrastructure but also national security.
Through this pilot project, the Chilean Army, together with UC students, developed tools to enhance analysis and response capabilities. In particular, the project examined the impact of applying artificial intelligence to malware analysis. Initiatives like this help improve understanding of the advanced mechanisms currently used by cybercriminals and strengthen defensive capabilities through training that integrates emerging technologies and models. This approach bolsters the skills of specialized personnel and contributes to the development of digital defense strategies against increasingly sophisticated threats.
Beyond its direct impact on the Army, the project represents a significant advance for the national cybersecurity industry, positioning itself as a pioneering effort in the use of AI for digital defense. Its value lies in its potential to prevent attacks, protect critical information, and strengthen the country’s digital sovereignty.
“CiberLab was crucial as a safe testing environment for critical infrastructure, allowing us to simulate real cyberattack scenarios. This experience, supported by UC through the SinLímites program, strengthened both my technical skills and my awareness of ethical challenges in cybersecurity. As a developer in the collaborative program, I participated in a challenge focused on malware identification techniques, applying artificial intelligence to automate analysis and explore potential risks. We identified trends in AI-generated malware being created by cybercriminals using publicly available tools, which represent a growing threat”.
PATRICIO ACEVEDO INDUSTRIAL CIVIL ENGINEERING STUDENT IN INFORMATION TECHNOLOGY UNIVERSIDAD CATÓLICA
Development of a multimodal analysis system for documentation
CiberLab also incorporates the use of enabling and emerging technologies, such as AI and generative models. During the first year, integration tests were conducted to assess their impact on current operations.
“Participating in the SinLímites program allowed me to significantly expand my knowledge, not only in technical skills but also in interpersonal and problem-solving abilities. This project gave me the opportunity to work in a multidisciplinary environment, collaborating with professionals and students from different fields, which enriched my approach to challenges. It also offered a new perspective on problem-solving: I learned to consider multiple approaches, adapt solutions to the context, and appreciate the importance of effective communication within a team. This experience strengthened my analytical skills, critical thinking, and initiative to propose innovative solutions to complex problems”.
In the daily work of organizations like the Chilean Army and other defense and security units, managing large volumes of sensitive data is critical to fulfilling their mission. This information comes in various formats, structured and unstructured, including text, audio, and images.
Currently, there are AI services with built-in chatbots that analyze documents online, such as ChatGPT (OpenAI, 2025). Similarly, there are cloud-based platforms for storing and managing documents while applying AI, including AWS (AWS, 2025) and similar services.
However, due to the sensitive nature of the information, it must be handled locally in an environment with the highest security standards. This challenge has been established to facilitate the analysis of information in multiple formats while maintaining strict confidentiality and security.
FERNANDA ROMERO 9TH-SEMESTER ASTRONOMY STUDENT UNIVERSIDAD CATÓLICA
Closing Presentation of the SinLímites Challenge, January 2025.
Designing a cyber defense simulator for critical infrastructure using scale models
This pilot project aligns with the requirements of Chile’s Cybersecurity Framework Law, which identifies the protection of critical infrastructure as a national priority. In a context where digital transformation has increased reliance on advanced technologies, ensuring the confidentiality, integrity, and availability of information is essential for the safe operation of key systems.
The challenge aimed to design and implement a mechanism to simulate cyber threats in the aerospace industry, focusing on the prevention and management of risks associated with unauthorized internal and external access. This involved vulnerability analysis, cyberattack simulations, and the development of robust, scalable security strategies.
The project is crucial for the Chilean Army, as it seeks to strengthen cyber defense capabilities in the face of emerging and complex threats.
In particular, the simulator models a use case centered on flight deck systems, enabling evaluation and mitigation of vulnerabilities. Its implementation represents a substantial advancement in preparedness for cyberattacks and the protection of national critical infrastructure.
“The development of the simulator marks a milestone for our institution and a concrete investment in innovation applied to the protection of critical infrastructure. It not only allows us to simulate cyberattacks in a controlled environment but also strengthens the training of our students in key areas such as cybersecurity, SCADA systems, and incident response”.
CRISTIAN BARRA DIRECTOR OF THE SCHOOL OF COMPUTER SCIENCE AND TELECOMMUNICATIONS AT DUOC UC
Mobile connectivity solutions for remote areas
This challenge aligns with Chile’s ongoing efforts to provide broad coverage of next-generation connectivity, including 5G and 5.5G. Due to the country’s complex geography, challenging terrain, and climaterelated disasters, coverage can be limited -particularly in remote regions -reducing the ability of essential services to respond effectively.
Within this context, the main goal of the pilot project was to explore and identify potential solutions to expand 5G coverage in remote areas, as well as to develop tools that support strategic decision-making aimed at achieving this objective.
“In its first year, CiberLab has established itself as a leading space for tackling the cybersecurity challenges of today’s digital environment. Its collaborative model -bringing together government, academia, and industry- has enabled progress in concrete pilot projects, specialized training, and the development of strategic capabilities. We are proud to be part of this initiative, which from the very beginning has promoted a culture of anticipation and resilience to protect what matters most: the country’s critical infrastructure”.
FRANCISCO GUZMÁN CLARO EMPRESAS VICE PRESIDENT
AND SKILLS DEVELOPMENT
The significance of this project lies in the critical role of national connectivity and coverage in responding to cybersecurity incidents, as well as its cross-sector importance for services during disruptive events or emergencies.
As part of the initiative, a range of tools was developed alongside a platform that provides real-time information on 5G connectivity, with a special focus on the Tarapacá Region. This platform is designed to be a key resource for identifying critical areas and evaluating strategies for future network expansion.
Building on this, CiberLab also explores connectivity and telecommunications as an enabling component of its cybersecurity research lines.
“Working with a diverse team of senior students to model connectivity in rural areas was an enriching experience. The technical work was complemented by everyone’s unique perspectives, resulting in an impressive outcome”.
ROLANDO MARTÍNEZ EXECUTIVE DIRECTOR - XTEC
Closing presentation of the SinLímites challenge, January 2025.
Training and skills development
Aimed at training cybersecurity professionals through specialized programs, simulations, and hands-on exercises, preparing incident response teams to protect critical infrastructure.
AND PROOF-OF-CONCEPT TRIALS
AND SKILLS DEVELOPMENT
PROOF-OF-CONCEPT TRIALS
Crisis scenarios, critical infrastructure, and decisionmaking
The UC Innovation Center, the UC Program in Law, Science, and Technology, and the Chilean Army designed and facilitated the first strategic cyber crisis simulation exercise for critical infrastructure. This exercise allowed participants to develop crisis management skills and identify best practices. The NIST framework served as the foundation for a role-based exercise in which participants faced decision-making challenges during a critical cybersecurity incident, applying best practices from their respective industries.
At the start of the day, participants received a strategic briefing from Chilean Army officers to familiarize them with the scenario. This was followed by a technical briefing led by Professor Matías Aránguiz, covering the methodology and technical frameworks to be used during the exercise. Each team was supported by monitors—students from the UC Law, Science, and Technology Program—who assisted throughout the simulation. The exercise focused on a data ransom scenario and assessed crisis management models for high-level decision-making in management and departments of national companies considered critical infrastructure.
Over more than three hours, each attendee assumed a role representing strategic areas of an organization, including legal, communications, technology, and executive management. They responded to assigned tasks and stimuli, made negotiation decisions, prepared reports for authorities, and provided statements to the press, among other activities.
Representatives from the private sector, public institutions, academia, and the Chilean Army, worked in crisis management teams to address a risk scenario involving a breach at a critical financial services institution.
“WE ARE RESPONSIBLE FOR IMPLEMENTING AND OPERATIONALIZING THE TECHNICAL AND STRATEGIC SOLUTIONS THAT EMERGE FROM THESE COLLABORATIONS. MULTIDISCIPLINARY WORK WITH CRITICAL INFRASTRUCTURE IS ESSENTIAL FOR DEVELOPING EFFECTIVE RESPONSES TO CYBER THREATS. BY INTEGRATING THESE INDUSTRIES INTO A COLLABORATIVE CYBERSECURITY NETWORK, WE ENSURE A CONTINUOUS FLOW OF INFORMATION. AND BEST PRACTICES TO DETECT, MITIGATE, AND RESPOND RAPIDLY TO ATTACKS”.
MAJOR GENERAL RODRIGO MARCHESSI ACUÑA COMMANDER OF SPECIAL OPERATIONS OF THE CHILEAN ARMY
The team exercises allowed participants to learn best practices for analyzing cyber incident scenarios and to approach complex problems from a multidisciplinary perspective, just as they would in a real attack. They also practiced communicating with both internal and external media of the affected organization.
This milestone marks the first in a series of simulation sessions and practical exercises aimed at strengthening the resilience capabilities of members within the critical infrastructure ecosystem and essential service operators nationwide.
“Digital resilience is built before a crisis hits. Every incident becomes actionable knowledge: we assess risk in real time, anticipate the next move, and deploy data-driven responses.
Crisis management requires multidisciplinary talent capable of containment, communication, and operational recovery, guided by international frameworks such as NERC-CIP and MITRE ATT&CK.
Only through simulation exercises and effective coordination between industry, academia, and government can we protect essential services and, ultimately, safeguard people”.
PATRICIO LEYTON DIRECTOR OF THE CYBERSECURITY AND CRITICAL INFRASTRUCTURE UNIT NATIONAL ELECTRICAL COORDINATOR
Claudio Cabrera, Customer Success Management Lead for Chile & Peru at NCR ATLEOS, participating in the communication exercise.
“In a crisis, it’s not only technical roles -those with structured response frameworks -that matter. There are also communication, legal, and decision-making roles, which play a key part in incident management and serve as the face of the organization to clients, employees, suppliers, and others”.
MATÍAS ARÁNGUIZ PROFESSOR OF UC LAW AND DEPUTY DIRECTOR, UC LAW, SCIENCE AND TECHNOLOGY PROGRAM
“Different sectors will be strengthened through collaboration. By sharing and integrating knowledge, skills, experience, and perspectives, each participating organization can improve its response capacity. Yet the greatest value comes from building trust and integrating capabilities. Defense in this field must be collaborative”.
LT. COL. JUAN PABLO DEL CASTILLO
INTELLIGENCE ADVISOR, SPECIAL OPERATIONS COMMAND, CHILEAN ARMY
Llaitún 2024 cyber defense exercise: IT/OT defense simulation
With the aim of integrating the technical dimension with decisionmaking, and in parallel with the strategic cyber crisis management exercise, the first tactical cyber defense exercise for critical infrastructures, Llaitún 2024, was conducted. This exercise tested the technical knowledge of institutional teams through a series of practical challenges.
The activity, carried out collaboratively by the UC Innovation Center, DreamLab Technologies, Duoc UC, and the Chilean Army, consisted of an online exercise for cybersecurity response teams, based on a Capture the Flag (CTF) model.
This CTF combined 14 challenges that teams had to solve competitively against the clock, with approximately eight hours to complete the entire set of exercises. Participants tackled ten traditional CTF exercises along with four simulated critical infrastructure scenarios, tasked with defending a system or application vulnerability. CTF challenges included activities such as malware analysis, data exfiltration, privilege escalation, SQL injection, and penetration testing, among others.
As part of the 2nd Cybersecurity Summit, held on November 25, five teams (Banco Estado, Banco de Chile, Duoc UC Viña del Mar campus, and Banco Falabella) were recognized for their outstanding participation in the exercise.
“The technical team designed multiple challenges covering reversing, web, privilege escalation, and more, with varying levels of difficulty. We firmly believe cybersecurity is an inclusive science: no matter how much you know, there’s always room to learn, grow, and teach. We focused on creating an innovative environment, without fear of failure, where each participant -beginner or advancedcould test their skills with confidence. Each challenge was pre-tested, and our team provided guidance before and throughout the event to ensure a smooth experience”.
RODRIGO RÍOS
STRATEGIC ALLIANCES LATAM DIRECTOR DREAMLAB
TECHNOLOGIES LATAM
“Simulate attacks in controlled environments using the tools needed to protect the national network, in addition to configuring deployment and network topology. Defense begins in the laboratory”.
BRUNO URREA STUDENT OF ENGINEERING IN CONNECTIVITY AND NETWORKS DUOC
UC
+60
14 4 Participants Teams from all over Chile Challenges faced
Simulated critical infrastructure scenarios
Llaitún 2025 cyber defense exercise: OT warrior edition
On July 23 of this year, a special edition of the tactical Capture The Flag (CTF) exercise was held, marking the first anniversary of CiberLab. This version, collaboratively organized by the UC Innovation Center, DreamLab Technologies, Duoc UC, and the Chilean Army, focused on simulating threats and incident response in critical infrastructures using operational technology (OT) environments. These technologies are essential for the country’s key productive industries and essential services, highlighting the importance of this specialized exercise. Facing a scenario where the integrity of a national infrastructure -represented by an airport and its critical systems- was threatened, participating teams had to react quickly, taking initiative and acting offensively to resolve threats commonly used by external malicious actors.
The activity included challenges with physical mock-ups representing national critical systems, deployed and operated from the Military Polytechnic Academy of the Chilean Army, with participants interacting remotely through controlled environments.
“Participating in the design of this CTF and seeing our faculty and students compete alongside prominent ecosystem actors, in an advanced cyber defense environment, is a unique opportunity to link technical training with real-world challenges in critical infrastructures. This experience enhances our capabilities and reaffirms our commitment to a safer digital environment for the country”.
ÓSCAR ARAYA T. AREA DEPUTY DIRECTOR, SCHOOL OF COMPUTER SCIENCE AND TELECOMMUNICATIONS, DUOC UC
“Projects like this allow us to test the cultural change companies must embrace with the new cybersecurity law. For us as students, it’s a concrete way to prepare for a future where digital and operational domains are increasingly interconnected”.
MARCOS SEPÚLVEDA STUDENT OF ELECTRICAL ENGINEERING AND INDUSTRIAL AUTOMATION
DUOC UC
CTF VTF 2025 exercise
Technical teams from CiberLab, together with DreamLab Technologies LATAM, supported the development and execution of a tactical Capture the Flag (CTF) exercise to strengthen applied skills and teamwork in real-world cybersecurity contexts within the banking industry. Participants included teams from the Chilean Association of Banks and Financial Institutions (ABIF) and guests from the Chilean Army, working in a collaborative, challenging, and high-pressure scenario.
Through exercises like this, CiberLab promotes the development of strategic and technical competencies to face cybersecurity challenges in collaborative, demanding environments.
This event was key to enhancing technical skills, critical thinking, and teamwork in real cyber defense contexts.
“We implemented 40 new challenges inspired by real banking issues: common operational errors, trading, currency exchange, user interfaces, and more. Beyond the technical content, the most valuable aspect was the work environment created. Thanks to CiberLab’s leadership and the collaborative spirit of all involved, we built a safe and motivating space where team bonds were strengthened, and we discovered both the strengths and weaknesses of our team”.
RODRIGO RÍOS DIRECTOR STRATEGIC ALLIANCES LATAM DREAMLAB TECHNOLOGIES LATAM
“Being part of the ecosystem that CiberLab is building is of great importance for the Association of Banks and Financial Institutions. Participation in exercises like this not only provides an additional tool to assess the technical capacity of the financial industry, but also allows for sharing experience and prioritizing objectives. Moreover, participating in exercises with institutions from other sectors significantly contributes to creating connections and strengthening the resilience of the digital ecosystem as a whole”.
CRISTIÁN VEGA
OPERATIONS AND TECHNOLOGY
MANAGER
CHILEAN ASSOCIATION OF BANKS AND FINANCIAL INSTITUTIONS
+200 +100 60 In-person attendees Online followers Participating companies/ organizations
2nd Cybersecurity summit: technology and success stories in critical infrastructure protection
In its first four months of operation, CiberLab built a strong portfolio of projects and proof-of-concept trials showcasing a range of realworld applications. These initiatives were presented at the 2nd Cybersecurity Summit: Technology and Success Stories in Critical Infrastructure Protection, highlighting the importance of collaboration between the public, private, and academic sectors to tackle today’s cybersecurity challenges.
Juan Huechucura, CISO of Aguas Andinas, shared a success story detailing his team’s work to safeguard water and sanitation services -an essential component of the nation’s critical infrastructure.
The event also featured a panel discussion on emerging cybersecurity challenges and CiberLab’s recent advancements, with participation from representatives of AWS, Duoc UC, and the Chilean Army.
Additional presentations came from the National Electric Coordinator and Siemens. During the summit, five multidisciplinary teams were recognized for their outstanding participation in the “Llaitún 2024 CTF” cyber defense exercise.
“Sharing experiences and best practices across industries is vital for strengthening the ecosystem’s capabilities and the resilience of our critical infrastructure. These exchanges create new opportunities for collaboration and open doors to fresh knowledge”.
JORGE REBOLLEDO HEAD OF CYBER INTELLIGENCE
CHILEAN ASSOCIATION OF BANKS AND FINANCIAL INSTITUTIONS
“My experience at the 2024 Summit reaffirmed the value of initiatives like CiberLab in reinforcing our cyber defenses. At a time when the National Cybersecurity Framework Law and the ANCI demand strong technical and human capabilities, organizations like this play a pivotal role in ensuring we remain informed, skilled, and ready to meet today’s challenges”.
JUAN HUECHUCURA CISO OF AGUAS ANDINAS
“Gaining first-hand knowledge of other countries’ experiences in similar situations allows us to adapt and strengthen our own capabilities. This goes hand in hand with comprehensive collaboration with other national stakeholders involved in the management of critical infrastructure, fostering indepth discussions that build trust and enable highlevel collaborative work—efforts that ultimately safeguard national interests”.
MG. CRISTIAN GUEDELHOEFER ERBETTA MAJOR GENERAL COMMANDER OF THE EDUCATION AND DOCTRINE COMMAND CHILEAN ARMY
Cyberwarfare seminar current landscape and emerging trends
As part of Chile’s Cybersecurity Month, the Chilean Army War Academy hosted a special analysis session led by André Reichow-Prehn, Managing Partner for EMEA (Central & Southern) and LATAM at Palo Alto Networks Unit 42. His presentation explored the types of cyber threats and criminal organizations operating in the hidden layers of the web, carrying out transnational attacks that can destabilize the political and social fabric of entire nations.
Using the Russia–Ukraine war as a reference point, André highlighted the need for digital defense strategies that prioritize the protection of critical infrastructure, including telecommunications, energy, logistics, and finance. This emphasized how attacks originating halfway across the globe could easily be replicated within Chile’s own systems. These threats demand that public, private, and defense sectors share knowledge and perspectives to safeguard these vital assets and strengthen national resilience.
Following his keynote, André joined the panel discussion “Cyberwarfare and Critical Infrastructure Challenges”, alongside representatives from the Chilean Army, the National Electrical Coordinator, and the UC Law, Science, and Technology Program.
The event successfully positioned cyberwarfare as a specialized area of discussion within a collaborative environment, underscoring the exponential growth of risks as integration with technologies like AI creates new possibilities for sophisticated cyberattacks worldwide.
“Today’s market is undergoing a rapid digital transformation, driven by technologies such as artificial intelligence, cloud computing, and automation—tools that are reshaping industrial models. In this environment, Palo Alto Networks has committed resources in software, equipment, and engineering to support the Lab’s development through testing, integration, training, and various collaborative activities”.
MAURICIO RAMÍREZ COUNTRY MANAGER, PALO ALTO NETWORKS
Diploma programs and specialized courses
A core pillar of CiberLab’s work portfolio is the development of specialized training programs, including diplomas and customdesigned courses tailored to the needs of the cybersecurity ecosystem.
Each program is built around the practical skills required by the technical and strategic teams who will participate, with content and learning activities fully customized. Instructors are carefully selected, prioritizing top professionals with up-to-date, hands-on experience in cybersecurity and digital defense.
These programs are highly focused on advanced, real-world technical application, with rigorous standards aligned to realistic operational scenarios. To date, more than 320 members of the armed forces have been trained in areas ranging from IT systems auditing to advanced cyber defense skills.
COL. ROBERTO CASTILLO HEAD OF CIITEC CHILEAN ARMY
“Thanks to the Framework Agreement signed in August 2024 between the Chilean Army and UC, both institutions have established a platform for academic cooperation aimed at developing strategic capabilities. This partnership integrates specialized training, technical consulting, applied research, and technology transfer. Over this period, we have formalized specific mechanisms that have enabled the delivery of cyber defense training programs, multidisciplinary internships, innovation-focused workshops, and the design of collaborative projects that bridge military expertise with scientific knowledge”.
“At CETIUC, we contribute knowledge, teaching experience, and instructional design to bring CiberLab’s training programs to life. This collaboration has made it possible to deliver highly specialized courses that today strengthen the country’s cybersecurity capabilities”.
CARLOS ROJAS DIRECTOR OF STRATEGIC AND ACADEMIC DEVELOPMENT CETIUC
Cybersecurity workshops
Siemens’ Industrial Cybersecurity Awareness Labs are a flagship success story among the workshops promoted by CiberLab, aimed at transforming operational security.
These labs are a strategic asset in today’s fast-changing landscape of digital threats. Through hands-on training, organizations learn how to safeguard critical assets, ensure uninterrupted operations, and build trust with stakeholders- all while meeting regulatory requirements.
In a world where cyber threats evolve constantly, these labs are an essential tool for readiness and incident response, delivering a tangible return through reduced risk and improved operational performance.
“Siemens’ labs provide a controlled environment where organizations can experience and learn how to counter real-world cyber threats. This practical approach strengthens operational resilience, mitigates risks, and protects critical assets, ensuring business continuity and regulatory compliance”.
ALFREDO ROLANDO
DIGITAL INDUSTRIES CYBERSECURITY REGIONAL MANAGER SIEMENS
Outreach and communications
One of CiberLab’s core objectives is to advance cybersecurity knowledge through academic events, scientific publications, and cross-institutional collaboration—strengthening the culture of security across the ecosystem. Below is a selection of press coverage from the lab’s first year of operations:
What cybersecurity challenges lie ahead for Chile in 2025?
UC Innovation Center inaugurates cyber defense lab for critical infrastructure
Experts examine crisismanagement challenges in the face of potential cyberattacks on the nation’s critical infrastructure
Crisis management is a muscle that must be trained
“Public-private collaboration and academia are key to strengthening national resilience against cyber threats”
Chilean army and pontificia universidad católica reinforce strategic alliance
UC and the Army Share CiberLab progress and announce the creation of a national cyber defense center
The threat of cyberattacks in industry
Special 2024: cybersecurity and artificial intelligence
AND SKILLS DEVELOPMENT
Cybertech South America 2025
Shortage of cybersecurity experts: call for new education models, more STEM, and greater inclusion of women
New legal requirements drive rising demand for cybersecurity talent
Experts analyze cybersecurity challenges in responding to potential crises in the country’s critical infrastructure
Siemens recognized at the AHK awards 2025 for Its contribution to technological innovation and cybersecurity in Chile
Inside the first critical infrastructure cyberattack simulation
Cyber defense as an essential tool to protect critical infrastructure
The cyber threats facing the mining sector
Cyber threats are growing exponentially. Our best defense: expanding collaborative networks.
The journey of is just beginning
Join the collaboration network!
Impact Report
Santiago, November 2025
Content Development, Writing, and Editing
Rocío Ortiz – Deputy Director of Future Industries, UC Innovation Center; Executive Director, CiberLab
Claudio Alcota – Deputy Director of Projects, School of Computer Science and Telecommunications, Duoc UC
Col. Raúl Rosas Álvarez – Director of Strategic Communications, Chilean Army
Marcela Briones, Director of Communications and Corporate Affairs, UC Innovation Center
Pamela Silva – Branding and Projects Coordinator, UC Innovation Center
Pierina Moscoso – Project and Management Coordinator, UC Innovation Center
Photography Photoadvisor.cl
UC Innovation Center Photo Archive
We gratefully acknowledge those who provided images for this document.
Design and Layout
iP21.cl
MarcaFuturo Branding Agency
Printing Imprenta MMG
ciberlab.uc.cl
ciberlab@uc.cl
