Collaborative research: Hands-on exercises on DETER testbed for security education

计算机科学(31)这个合作项目的目标是为本科生课程开发一个公共的实践安全练习库。这些练习包括学生实际操作的安全实验，演示现实的威胁和防御。它们在计算机安全课程中提供主动学习机会，该课程通常采用被动学习方法教授。演习在南加州大学共享、公开和免费的威慑试验台上进行；其余四所合作机构，包括科罗拉多州立大学、加州大学洛杉矶分校、利哈伊大学和北卡罗来纳大学夏洛特分校，在安全教育和研究方面提供独特和多样化的体验。每个演习的设置都是完全自动化的，使用定制练习的工具；伴随着常见陷阱的详细指南；并得到实验健康管理的支持，当他们的实验配置不正确时，它会向学生发送自动警报。Dcreer试验台包含多个流量生成、可视化和实验监控工具，允许学生通过简单的图形用户界面交互在高级别工作，以及在低级别的命令行活动中工作。该项目提供随时随地可供公众访问的便携式共享练习，使其比必须共享计算机实验室或需要复杂的物理设置更容易访问。该项目有可能通过安全会议的教程、讲习班和威慑通讯等外联活动接触到大量的机构。

Computer Science (31) The objective of this collaborative project is to develop a public repository of practical security exercises for undergraduate curriculum. These exercises involve students in hands-on security experiments, demonstrating realistic threats and defenses. They provide active learning opportunities in computer security curriculum which has been typically taught using passive learning methods. The exercises are hosted on the shared, public and free DETER testbed at the lead institution, University of Southern California; the remaining four collaborating institutions, including Colorado State University, University of California Los Angeles, Lehigh University, and the University of North Carolina at Charlotte offer a unique and diverse experience in security education and research.The setup of each exercise is fully automated with tools for customization of exercises; accompanied by detailed guidelines about common pitfalls; and supported by experiment health management to send students automated alerts when their experiment is not configured properly. The DETER testbed contains several traffic generation, visualization and experiment monitoring tools which allow students to work at a high-level via a simple GUI interaction as well as at low-level, command-line activities.The project delivers portable, shared and publicly accessible exercises available from anywhere, at any time, making it more accessible than having to share a computer lab or requiring a complex physical setup. This project has a potential to reach a large number institutions via outreach activities such as tutorials at security conferences; workshops, and the DETER newsletter.