Hands-on Cybersecurity Exercises that are Easy to Access
Hands-on Cybersecurity Exercises that are Easy to Access
复制标题
易于访问的网络安全实践练习
DOI：
10.1145/3287324.3293759
复制
发表时间：
2019
期刊：
影响因子：
--
通讯作者：
Mache, Jens
中科院分区：
文献类型：
--
作者：
Weiss, Richard;Mache, Jens
网络安全专业人员的严重短缺促使教师有兴趣将其添加到课程中，并将其添加到2013年的ACM/ IEEE模型课程中。这是一个需要动手练习的科目。此类活动的数量略有增加，但其局限性在于可用性。大多数教师没有时间创建自己的练习，修改和安装VM，并设置评估机制。EDURange是一个用于访问、开发和评估交互式网络安全演习的框架。它有从入门到高级的一系列练习。我们将演示一个关于使用命令行的介绍性练习和一个关于网络扫描的高级练习。我们希望尽可能多地接触和参与教师，以便他们能够开发自己的练习。EDURange使用云中的VM。学生只需要一个ssh客户端。我们已经建立了工具，为教师提供有关学生表现的详细信息。这使得教师可以更容易地看到学生何时陷入困境或朝着错误的方向前进。我们创建的练习有指导员可以使用的手册。有关EDURange的信息，请访问https://edurange.org。
The critical shortage of cyber security professionals has driven faculty interest in adding this to the curriculum, and it was added to the ACM/ IEEE Model Curriculum of 2013. This is a subject that demands hands-on exercises. There has been a modest increase in the number of such exercises, but the limit is usability. Most faculty do not have the time to create their own exercises, modify and install VMs, and set up assessment mechanisms. EDURange is a framework for accessing, developing and assessing interactive cybersecurity exercises. It has a range of exercises from introductory to advanced. We will demo an introductory exercise about using the command line and an advanced exercise about network scanning. We want to reach and engage as many faculty as possible, so that they can develop their own exercises. EDURange uses VMs in the cloud. Students only need an ssh-client. We have built tools to give faculty detailed information on how students are doing. This allows instructors to more easily see when students are stuck or heading in the wrong direction. The exercises we have created have manuals that instructors can use. Information about EDURange can be found at https://edurange.org.