Collaborative Research: TUES: Type 1: EDURange: A Cybersecurity Competition Platform to Enhance Undergraduate Security Analysis Skills

合作研究：TUES：类型 1：EDURange：提高本科生安全分析技能的网络安全竞赛平台

• 批准号: 1141314
• 负责人: Jens Mache
• 金额: $ 7.83万
• 依托单位: Lewis and Clark College
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2012
• 资助国家: 美国
• 起止时间: 2012-08-15 至 2016-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1141314&HistoricalAwards=false
• 关键词: Collaborative; Research; TUES; Type; EDURange

The objective of this project is to develop a cybersecurity lab environment (EDURange) that is open to the public and allows creation of custom exercises in a 'live-fire' setting. It is designed to provide students with an active learning environment focusing on analysis skills rather than on training based on a pre-packaged set of tools. Preparing cybersecurity exercises is a major obstacle in many academic programs but the proposed environment is simple enough that faculty with limited knowledge of cybersecurity can employ it in the classroom. The exercises are accompanied by tutorials linked to learning objectives. EDURange's design, its lab scenarios and scoring system, reward the effort that students spend on analysis and reverse-engineering.The proposed project focuses on: (1) the construction and deployment of cybersecurity scenarios in local and cloud environments; and (2) using the scenarios as an assessment tool for both students in the course of their studies as well as an independent benchmark for other cybersecurity training curricula. EDURange scenarios are well-documented and of varying difficulty and complexity to make them attractive to a wide range of academic programs and institutions. The scenarios are hosted in a publicly available cybersecurity testbed and in a cloud environment. The project includes outreach activities at the annual SIGCSE conference.

该项目的目标是开发一个向公众开放的网络安全实验室环境（EDURange），并允许在“实弹”环境中创建自定义练习。它旨在为学生提供一个积极的学习环境，重点是分析技能，而不是基于预先包装的一套工具的培训。准备网络安全练习是许多学术课程的主要障碍，但拟议的环境足够简单，网络安全知识有限的教师可以在课堂上使用它。练习附有与学习目标相关的教程。EDURange的设计，实验室场景和评分系统，奖励学生在分析和逆向工程方面所付出的努力。拟议的项目重点是：（1）在本地和云环境中构建和部署网络安全场景;（2）将场景用作学生学习过程中的评估工具，以及其他网络安全培训课程的独立基准。EDURange场景有很好的记录，并且具有不同的难度和复杂性，使它们对广泛的学术课程和机构具有吸引力。这些场景托管在一个公开的网络安全测试平台和云环境中。该项目包括在团结与合作研究所年度会议上开展外联活动。