Collaborative Research: TUES: Type 1: EDURange: A Cybersecurity Competition Platform to Enhance Undergraduate Security Analysis Skills

合作研究：TUES：类型 1：EDURange：提高本科生安全分析技能的网络安全竞赛平台

• 批准号: 1141341
• 负责人: Richard Weiss
• 金额: $ 12万
• 依托单位: Evergreen State College
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2012
• 资助国家: 美国
• 起止时间: 2012-08-15 至 2016-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1141341&HistoricalAwards=false
• 关键词: Collaborative; Research; TUES; Type; EDURange

The objective of this project is to develop a cybersecurity lab environment (EDURange) that is open to the public and allows creation of custom exercises in a 'live-fire' setting. It is designed to provide students with an active learning environment focusing on analysis skills rather than on training based on a pre-packaged set of tools. Preparing cybersecurity exercises is a major obstacle in many academic programs but the proposed environment is simple enough that faculty with limited knowledge of cybersecurity can employ it in the classroom. The exercises are accompanied by tutorials linked to learning objectives. EDURange's design, its lab scenarios and scoring system, reward the effort that students spend on analysis and reverse-engineering.The proposed project focuses on: (1) the construction and deployment of cybersecurity scenarios in local and cloud environments; and (2) using the scenarios as an assessment tool for both students in the course of their studies as well as an independent benchmark for other cybersecurity training curricula. EDURange scenarios are well-documented and of varying difficulty and complexity to make them attractive to a wide range of academic programs and institutions. The scenarios are hosted in a publicly available cybersecurity testbed and in a cloud environment. The project includes outreach activities at the annual SIGCSE conference.

该项目的目标是开发一个对公众开放的网络安全实验室环境(EDURange)，并允许在“实弹”环境中创建自定义演习。它旨在为学生提供一个积极的学习环境，重点放在分析技能上，而不是基于一套预先打包的工具进行培训。准备网络安全练习是许多学术项目的主要障碍，但拟议的环境足够简单，只有有限的网络安全知识的教师可以在课堂上使用它。这些练习还附有与学习目标相关的教程。EDURange的设计、实验室场景和评分系统，奖励了学生在分析和逆向工程上所做的努力。拟议的项目重点是：(1)在本地和云环境中构建和部署网络安全场景；(2)将场景用作学生在学习过程中的评估工具，以及其他网络安全培训课程的独立基准。EDURange场景有很好的记录，并且具有不同的难度和复杂性，使它们对广泛的学术项目和机构具有吸引力。这些场景托管在公开可用的网络安全试验床和云环境中。该项目包括在SIGCSE年度会议上开展的外联活动。