EDU: Revitalizing Cyber Security Education and Research through Competitions

EDU：通过竞赛振兴网络安全教育和研究

• 批准号: 1319197
• 负责人: Jelena Mirkovic
• 金额: $ 30万
• 依托单位: University of Southern California
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2014
• 资助国家: 美国
• 起止时间: 2014-09-01 至 2017-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1319197&HistoricalAwards=false
• 关键词: EDU; Revitalizing; Cyber; Security; Education

The objective of this project is to revitalize cyber security education and research by introducing competitive aspects into their current lifecycles. The project will create and deploy light-weight, online and diverse Class Capture-The-Flag (CCTF) exercises on the DeterLab testbed. The competitions will require only modest preparation and students will engage in competitions remotely, at any time convenient for both teams. The competitions will cover a broad range of security topics, such as infrastructure threats and defenses, denial-of-service, botnet detection and infiltration, etc. Competitions will occur multiple times during a semester and will involve students from different institutions, alternating between an attacker and a defender role. To address ethical concerns about teaching students offensive technologies, the project will develop online materials on ethical offense, and will require each participant to view the materials and pass the related quiz before engaging in competitions. The project will also create a Security Challenge portal, where researchers can challenge others to break their research prototypes experimentally or by design analysis. The project team will further develop the Grand Challenge portal, hosting grand challenges in several security sub-fields. The initial grand challenges will be created by experts in selected sub-fields during virtual workshops. The Secure and Trustworthy Cyberspace (SaTC) program funds proposals that address Cybersecurity from a Trustworthy Computing Systems perspective; a Social, Behavioral and Economic Sciences perspective; and proposals focusing entirely on Cybersecurity Education.The education modules developed to accompany the CCTFs will reach student audiences that would not otherwise receive security education. Researchers that engage in security challenges will benefit from having more sound solutions and stronger publications than they would otherwise. Grand challenges will engage multiple teams competing towards the common goal, galvanizing research on that specific class of problems. Further, security challenges and grand challenges will promote better security metrics, experiment methodologies and code and data sharing. This will improve the quality of security research, and the science of security experimentation. The educational modules that cover topics related to each CCTF exercise will enable participation by underprivileged and minority institutions that may not regularly teach a security class.

该项目的目标是通过将竞争方面引入其当前的生命周期来振兴网络安全教育和研究。该项目将在DeterLab测试平台上创建和部署轻量级，在线和多样化的Class Capture-The-Flag（CCTF）练习。比赛只需要适度的准备，学生将在两支球队方便的任何时候远程参加比赛。比赛将涵盖广泛的安全主题，如基础设施威胁和防御，拒绝服务，僵尸网络检测和渗透等，比赛将在一个学期内多次举行，将涉及来自不同机构的学生，在攻击者和防御者角色之间交替。为了解决有关教授学生进攻性技术的道德问题，该项目将开发关于道德进攻的在线材料，并要求每个参与者在参加比赛之前查看材料并通过相关测验。该项目还将创建一个安全挑战门户网站，研究人员可以通过实验或设计分析来挑战其他人打破他们的研究原型。项目小组将进一步开发“重大挑战”门户网站，主办若干安全分领域的重大挑战。最初的大挑战将由选定子领域的专家在虚拟研讨会期间创建。安全和值得信赖的网络空间（SaTC）计划资助从值得信赖的计算系统角度解决网络安全问题的提案;社会、行为和经济科学角度;以及完全专注于网络安全教育的提案。为配合CCTFs开发的教育模块将覆盖那些原本无法接受安全教育的学生受众。从事安全挑战的研究人员将受益于比其他情况下更健全的解决方案和更强大的出版物。大挑战将吸引多个团队为共同目标而竞争，激发对特定问题的研究。此外，安全挑战和重大挑战将促进更好的安全指标，实验方法以及代码和数据共享。这将提高安全研究的质量和安全实验的科学。教育模块涵盖与每项有条件现金信托基金活动有关的主题，将使可能不经常教授安全课程的贫困和少数民族机构能够参与。