Collaborative Research: TUES: Type 1: EDURange: A Cybersecurity Competition Platform to Enhance Undergraduate Security Analysis Skills

合作研究：TUES：类型 1：EDURange：提高本科生安全分析技能的网络安全竞赛平台

• 批准号: 1141341
• 负责人: Richard Weiss
• 金额: $ 12万
• 依托单位: Evergreen State College
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2012
• 资助国家: 美国
• 起止时间: 2012-08-15 至 2016-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1141341&HistoricalAwards=false
• 关键词: Collaborative; Research; TUES; Type; EDURange

The objective of this project is to develop a cybersecurity lab environment (EDURange) that is open to the public and allows creation of custom exercises in a 'live-fire' setting. It is designed to provide students with an active learning environment focusing on analysis skills rather than on training based on a pre-packaged set of tools. Preparing cybersecurity exercises is a major obstacle in many academic programs but the proposed environment is simple enough that faculty with limited knowledge of cybersecurity can employ it in the classroom. The exercises are accompanied by tutorials linked to learning objectives. EDURange's design, its lab scenarios and scoring system, reward the effort that students spend on analysis and reverse-engineering.The proposed project focuses on: (1) the construction and deployment of cybersecurity scenarios in local and cloud environments; and (2) using the scenarios as an assessment tool for both students in the course of their studies as well as an independent benchmark for other cybersecurity training curricula. EDURange scenarios are well-documented and of varying difficulty and complexity to make them attractive to a wide range of academic programs and institutions. The scenarios are hosted in a publicly available cybersecurity testbed and in a cloud environment. The project includes outreach activities at the annual SIGCSE conference.

该项目的目的是开发向公众开放的网络安全环境（Edurange），并允许在“实时火灾”环境中创建自定义练习。它旨在为学生提供一个专注于分析技能的积极学习环境，而不是基于预包装的工具的培训。在许多学术计划中，准备网络安全练习是一个主要障碍，但是拟议的环境很简单，以至于对网络安全知识有限的教师可以在课堂上使用它。练习伴随着与学习目标有关的教程。 Edurange的设计，其实验室场景和评分系统，奖励学生在分析和反向工程上花费的努力。拟议的项目重点是：（1）在本地和云环境中网络安全方案的构建和部署； （2）在他们的学习过程中使用这些方案作为评估工具，以及其他网络安全培训课程的独立基准。 Edurange场景有充分的文献记录，并且难度和复杂性有所不同，以使它们对广泛的学术计划和机构有吸引力。这些方案托管在公开可用的网络安全测试床和云环境中。该项目包括在年度SIGCSE会议上的外展活动。