Development of IoT Security Exercise Contents for Cyber Security Exercise System
Development of IoT Security Exercise Contents for Cyber Security Exercise System
复制标题
网络安全演练系统物联网安全演练内容开发
DOI：
10.1109/hsi49210.2020.9142678
复制
发表时间：
2020
期刊：
影响因子：
--
通讯作者：
Seto Yoichi
中科院分区：
文献类型：
--
作者：
Shin Sanggyu;Seto Yoichi
在本文中，我们讨论了物联网安全演习内容的开发及其在CyExec上的实现。虽然物联网（IoT）设备变得越来越流行，但漏洞对策不足，并且发生了许多事件。这是因为对物联网设备特有的漏洞没有足够的保护。此外，开发人员和用户对物联网设备过去的漏洞认识不足。因此，物联网设备安全教育的重要性正在增加。然而，引入和运营成本的巨大负担限制了商业网络安全演习系统的使用。CyExec（Cyber Security Exercise System）由使用VirtualBox和Docker的虚拟环境组成，是我们为传播安全教育而提出的低成本和灵活的网络安全练习系统。CyExec的练习内容由基础练习和应用练习组成。
In this paper, we discuss the development of the IoT security exercise content and the implementation of it to the CyExec. While the Internet of Things (IoT) devices are becoming more popular, vulnerability countermeasures are insufficient, and many incidents have occurred. It is because there is insufficient protection against vulnerabilities specific to IoT equipment. Also, the developers and users have low awareness of IoT devices against vulnerabilities from the past. Therefore, the importance of security education on IoT devices is increasing. However, the enormous burden of introduction and operation costs limited the use of commercial cybersecurity exercise systems. CyExec (Cyber Security Exercise System), consisting of a virtual environment using VirtualBox and Docker, is a low-cost and flexible cybersecurity exercise system, which we have proposed for the dissemination of security education. And the content of the exercises for CyExec is composed of the Basic exercises and Applied exercises.