EDU: Revitalizing Cyber Security Education and Research through Competitions

该项目的目标是通过在网络安全教育和研究的当前生命周期中引入竞争性方面来振兴网络安全教育和研究。该项目将在DeterLab试验台上创建和部署轻量级、在线和多样化的班级捕获旗帜(CCTF)练习。比赛只需要适度的准备，学生们将在两队方便的任何时间远程参加比赛。比赛将涵盖广泛的安全主题，如基础设施威胁和防御、拒绝服务、僵尸网络检测和渗透等。比赛将在一个学期内多次举行，将有来自不同机构的学生参与，轮流扮演攻击者和防御者的角色。为了解决教授学生攻击性技术的伦理问题，该项目将开发关于伦理攻击性的在线材料，并要求每个参与者在参加比赛之前查看材料并通过相关测验。该项目还将创建一个安全挑战门户网站，研究人员可以在那里挑战其他人，通过实验或设计分析来打破他们的研究原型。项目组将进一步开发大挑战门户网站，托管几个安全子领域的大挑战。最初的重大挑战将由选定的子领域的专家在虚拟研讨会期间提出。安全和值得信赖的网络空间(SATC)计划资助从可信计算系统的角度解决网络安全的提案，从社会学、行为学和经济学的角度解决网络安全的提案，以及完全专注于网络安全教育的提案。为配合CCTF开发的教育模块将接触到原本无法接受安全教育的学生受众。从事安全挑战的研究人员将受益于比其他情况下拥有更完善的解决方案和更强大的出版物。重大挑战将使多个团队朝着共同的目标竞争，激发对这类特定问题的研究。此外，安全挑战和重大挑战将促进更好的安全指标、实验方法以及代码和数据共享。这将提高安全研究的质量，提高安全实验的科学性。涉及CCTF每项活动的主题的教育单元将使可能不定期教授安全课程的弱势群体和少数群体机构能够参与。

The objective of this project is to revitalize cyber security education and research by introducing competitive aspects into their current lifecycles. The project will create and deploy light-weight, online and diverse Class Capture-The-Flag (CCTF) exercises on the DeterLab testbed. The competitions will require only modest preparation and students will engage in competitions remotely, at any time convenient for both teams. The competitions will cover a broad range of security topics, such as infrastructure threats and defenses, denial-of-service, botnet detection and infiltration, etc. Competitions will occur multiple times during a semester and will involve students from different institutions, alternating between an attacker and a defender role. To address ethical concerns about teaching students offensive technologies, the project will develop online materials on ethical offense, and will require each participant to view the materials and pass the related quiz before engaging in competitions. The project will also create a Security Challenge portal, where researchers can challenge others to break their research prototypes experimentally or by design analysis. The project team will further develop the Grand Challenge portal, hosting grand challenges in several security sub-fields. The initial grand challenges will be created by experts in selected sub-fields during virtual workshops. The Secure and Trustworthy Cyberspace (SaTC) program funds proposals that address Cybersecurity from a Trustworthy Computing Systems perspective; a Social, Behavioral and Economic Sciences perspective; and proposals focusing entirely on Cybersecurity Education.The education modules developed to accompany the CCTFs will reach student audiences that would not otherwise receive security education. Researchers that engage in security challenges will benefit from having more sound solutions and stronger publications than they would otherwise. Grand challenges will engage multiple teams competing towards the common goal, galvanizing research on that specific class of problems. Further, security challenges and grand challenges will promote better security metrics, experiment methodologies and code and data sharing. This will improve the quality of security research, and the science of security experimentation. The educational modules that cover topics related to each CCTF exercise will enable participation by underprivileged and minority institutions that may not regularly teach a security class.