Collaborative Research: Hands-On Exercises on DETER Testbed for Security Education

计算机科学（31）这个合作项目的目标是开发一个本科课程的实用安全练习的公共知识库。这些练习让学生参与实际操作的安全实验，展示现实的威胁和防御。它们提供了计算机安全课程的主动学习机会，这些课程通常使用被动学习方法进行教学。这些演习是在牵头机构南加州大学的共享、公共和免费的DETER测试平台上进行的;其余四个合作机构，包括科罗拉多州立大学，加州大学洛杉矶，利哈伊大学，和位于夏洛特的北卡罗来纳州大学提供了独特而多样化的安全教育和研究经验。每个练习的设置都是完全自动化的，自定义练习;附有关于常见陷阱的详细指南;并由实验健康管理支持，当实验配置不正确时向学生发送自动警报。DETER测试平台包含多个流量生成、可视化和实验监控工具，让学生可以通过简单的GUI交互进行高级别的工作，也可以进行低级别的命令行活动。该项目提供便携式、共享和公开访问的练习，可以随时随地使用，比共享计算机实验室或需要复杂的物理设置更容易访问。该项目有可能通过安全会议辅导、讲习班和DETER通讯等外联活动接触到大量机构。

Computer Science (31) The objective of this collaborative project is to develop a public repository of practical security exercises for undergraduate curriculum. These exercises involve students in hands-on security experiments, demonstrating realistic threats and defenses. They provide active learning opportunities in computer security curriculum which has been typically taught using passive learning methods. The exercises are hosted on the shared, public and free DETER testbed at the lead institution, University of Southern California; the remaining four collaborating institutions, including Colorado State University, University of California Los Angeles, Lehigh University, and the University of North Carolina at Charlotte offer a unique and diverse experience in security education and research.The setup of each exercise is fully automated with tools for customization of exercises; accompanied by detailed guidelines about common pitfalls; and supported by experiment health management to send students automated alerts when their experiment is not configured properly. The DETER testbed contains several traffic generation, visualization and experiment monitoring tools which allow students to work at a high-level via a simple GUI interaction as well as at low-level, command-line activities.The project delivers portable, shared and publicly accessible exercises available from anywhere, at any time, making it more accessible than having to share a computer lab or requiring a complex physical setup. This project has a potential to reach a large number institutions via outreach activities such as tutorials at security conferences; workshops, and the DETER newsletter.