Collaborative research: Hands-on exercises on DETER testbed for security education

计算机科学（31）本合作项目的目标是为本科课程开发一个实用安全练习的公共存储库。这些练习让学生亲自动手进行安全实验，演示现实的威胁和防御。它们为计算机安全课程提供了主动学习的机会，而计算机安全课程通常采用被动学习方法进行教学。演习在主要机构南加州大学（University of Southern California）的共享、公共和免费的DETER测试平台上进行；其余四所合作机构，包括科罗拉多州立大学、加州大学洛杉矶分校、利哈伊大学和北卡罗来纳大学夏洛特分校，在安全教育和研究方面提供了独特而多样的经验。每个练习的设置是完全自动化的工具，用于定制练习；附有关于常见陷阱的详细指导方针；在实验运行状况管理的支持下，可以在实验配置不正确时向学生发送自动警报。DETER测试平台包含几个流量生成、可视化和实验监控工具，这些工具允许学生通过简单的GUI交互进行高级工作，也可以进行低级命令行活动。该项目提供可移植的、共享的和可公开访问的练习，可以从任何地方、任何时间获得，使其比必须共享计算机实验室或需要复杂的物理设置更容易访问。这个项目有可能通过外联活动，例如在安全会议上讲授课程，接触到许多机构；研讨会，以及威慑通讯。

Computer Science (31) The objective of this collaborative project is to develop a public repository of practical security exercises for undergraduate curriculum. These exercises involve students in hands-on security experiments, demonstrating realistic threats and defenses. They provide active learning opportunities in computer security curriculum which has been typically taught using passive learning methods. The exercises are hosted on the shared, public and free DETER testbed at the lead institution, University of Southern California; the remaining four collaborating institutions, including Colorado State University, University of California Los Angeles, Lehigh University, and the University of North Carolina at Charlotte offer a unique and diverse experience in security education and research.The setup of each exercise is fully automated with tools for customization of exercises; accompanied by detailed guidelines about common pitfalls; and supported by experiment health management to send students automated alerts when their experiment is not configured properly. The DETER testbed contains several traffic generation, visualization and experiment monitoring tools which allow students to work at a high-level via a simple GUI interaction as well as at low-level, command-line activities.The project delivers portable, shared and publicly accessible exercises available from anywhere, at any time, making it more accessible than having to share a computer lab or requiring a complex physical setup. This project has a potential to reach a large number institutions via outreach activities such as tutorials at security conferences; workshops, and the DETER newsletter.