CT-ER: A Framework for Live Security Exercises and Challenges

CT-ER：实时安全练习和挑战的框架

• 批准号: 0716753
• 负责人: Giovanni Vigna
• 金额: $ 20万
• 依托单位: University of California-Santa Barbara
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-10-01 至 2011-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0716753&HistoricalAwards=false
• 关键词: CT; ER; Framework; Live; Security

Computer security is a critical issue that affects our everyday life. For this reason, most colleges and other educational institutions are devoting an increasing amount of resources to develop courses and curricula that involve security training. Typical courses include cryptography, general computer security, network security, and specialized topics, such as security of wireless networks and web security.Unfortunately, very few hands-on security courses are offered because of the additional difficulties of teaching practical security, which requires substantial extra effort on the part of both the instructor and the educational institution hosting the course. In particular, live exercises require a substantial amount of resources to prepare and execute.This research will develop a framework for the creation and execution of live security exercises. The framework will reduce the time and effort needed to organize live exercises, and, in addition, it will make these exercises repeatable.The framework will allow other Universities and educational institutions to take advantage of live exercises to provide hands-on security training to students. The framework will be usable in the context of a single course whose focus in on security, or could be use to support large-scale, multi-institution competitions. As a result, the framework will provide a novel tool for supporting the development of security skills of both undergraduate and graduate students.

计算机安全是影响我们日常生活的重要问题。因此，大多数学院和其他教育机构正在投入越来越多的资源来开发涉及安全培训的课程和课程。典型的课程包括密码学、通用计算机安全、网络安全和专业主题，如无线网络安全和Web安全。不幸的是，很少提供实践安全课程，因为实际安全教学的额外困难，需要教师和教育机构共同付出大量额外的努力。 特别是，现场演习需要大量的资源来准备和执行。这项研究将制定一个框架，为创建和执行现场安全演习。该框架将减少组织现场演习所需的时间和精力，此外，它将使这些演习具有可重复性。该框架将允许其他大学和教育机构利用现场演习为学生提供实践安全培训。该框架将可用于一个单一的课程，其重点是安全的背景下，或可用于支持大规模，多机构的竞争。 因此，该框架将提供一个新的工具，支持本科生和研究生的安全技能的发展。