The use of a collegiate cyber defense competition in information security education
The use of a collegiate cyber defense competition in information security education
复制标题
大学生网络防御竞赛在信息安全教育中的运用
DOI：
--
复制
发表时间：
2005
期刊：
影响因子：
--
通讯作者：
Art Conklin
中科院分区：
文献类型：
--
作者：
Art Conklin
今年春天，五所大学组成了一个大学网络防御竞赛。这项活动旨在为学生领导的团队提供一个模拟的业务运营环境，让他们可以测试他们在信息安全和系统操作方面的技能。这场为期三天的活动包括外部黑客攻击学生网络，以及商业用户对团队提出的运营和管理要求。团队的得分是基于他们维护授权业务服务、阻止黑客入侵和回答业务场景注入的能力。其目的是提供一个环境，使各小组能够在一种运作模式下行使其信息技术能力，在这种模式下，大多数信息不是免费提供的，而是必须由学生在真实的时间内发现和发现的。使用真实的世界的例子在一个已知的仪表化网络上测试的问题，如优先级，资源分配和技术技能的应用。向每个团队提供关于其技能水平和能力的反馈的目标已经实现，然后在这个成功的活动过程中实现了一些反馈。吸取的经验教训正被用来将这一地方活动提升为国家一级的活动。
A Collegiate Cyber Defense Competition was conducted this spring with five universities fielding teams. This event was designed to provide student led teams a simulated operational business environment in which they could test their skills at information security and system operation. This three day event included external hackers attacking the student networks, as well as business users placing operational and administrative demands on the teams. Teams were scored based on their ability to maintain mandated business services, keeping hackers out and answering business scenario injects. The objective was to provide an environment where the teams could exercise their information technology abilities and do so in an operational mode where most information was not freely provided, but must be uncovered and discovered by the students in real time. Issues such as prioritization, resource allocation and technical skill application were tested using real world examples on a known instrumented network. The objective of providing feedback to each team as to its skill level and abilities was achieved and then some over the course of this successful event. Lessons were learned which are being used to move this local event to a national level event.