EDU: Revitalizing Cyber Security Education and Research through Competitions

该项目的目标是通过将竞争方面引入网络安全教育和研究的当前生命周期来振兴网络安全教育和研究。该项目将在detlab测试平台上创建和部署轻型、在线和多样化的“夺旗”（CCTF）演习。比赛只需要少量的准备工作，学生可以在双方方便的任何时间远程参与比赛。竞赛将涵盖广泛的安全主题，如基础设施威胁和防御、拒绝服务、僵尸网络检测和渗透等。比赛将在一个学期中进行多次，来自不同机构的学生将在攻击者和防守者之间交替进行。为了解决教授学生攻击性技术的道德问题，该项目将开发有关道德冒犯的在线材料，并要求每个参与者在参加比赛之前查看材料并通过相关测验。该项目还将创建一个安全挑战门户，研究人员可以在那里挑战其他人，通过实验或设计分析来打破他们的研究原型。项目团队将进一步开发大挑战门户，在几个安全子领域主持大挑战。最初的重大挑战将由选定的子领域的专家在虚拟研讨会期间创建。安全与可信网络空间（SaTC）项目资助从可信计算系统角度解决网络安全问题的提案；社会、行为和经济科学视角；以及完全专注于网络安全教育的提案。为国家安全教育基金开发的教育模块将面向原本无法接受安全教育的学生受众。从事安全挑战的研究人员将受益于拥有更多可靠的解决方案和更强大的出版物。大挑战将吸引多个团队为共同的目标而竞争，激发对特定问题类别的研究。此外，安全挑战和大挑战将促进更好的安全度量、实验方法以及代码和数据共享。这将提高安全研究的质量和安全实验的科学性。涵盖与CCTF每次演习相关主题的教育模块将使可能不定期教授安全课程的贫困和少数族裔机构能够参与。

The objective of this project is to revitalize cyber security education and research by introducing competitive aspects into their current lifecycles. The project will create and deploy light-weight, online and diverse Class Capture-The-Flag (CCTF) exercises on the DeterLab testbed. The competitions will require only modest preparation and students will engage in competitions remotely, at any time convenient for both teams. The competitions will cover a broad range of security topics, such as infrastructure threats and defenses, denial-of-service, botnet detection and infiltration, etc. Competitions will occur multiple times during a semester and will involve students from different institutions, alternating between an attacker and a defender role. To address ethical concerns about teaching students offensive technologies, the project will develop online materials on ethical offense, and will require each participant to view the materials and pass the related quiz before engaging in competitions. The project will also create a Security Challenge portal, where researchers can challenge others to break their research prototypes experimentally or by design analysis. The project team will further develop the Grand Challenge portal, hosting grand challenges in several security sub-fields. The initial grand challenges will be created by experts in selected sub-fields during virtual workshops. The Secure and Trustworthy Cyberspace (SaTC) program funds proposals that address Cybersecurity from a Trustworthy Computing Systems perspective; a Social, Behavioral and Economic Sciences perspective; and proposals focusing entirely on Cybersecurity Education.The education modules developed to accompany the CCTFs will reach student audiences that would not otherwise receive security education. Researchers that engage in security challenges will benefit from having more sound solutions and stronger publications than they would otherwise. Grand challenges will engage multiple teams competing towards the common goal, galvanizing research on that specific class of problems. Further, security challenges and grand challenges will promote better security metrics, experiment methodologies and code and data sharing. This will improve the quality of security research, and the science of security experimentation. The educational modules that cover topics related to each CCTF exercise will enable participation by underprivileged and minority institutions that may not regularly teach a security class.