CICI: Regional: Substrate for Cybersecurity Education; a Platform for Training, Research and Experimentation (SCEPTRE)

如果没有经过充分培训的具有广泛适用技术技能的人员，就不可能建立和运作相当安全和有保障的网络基础设施。这类人供不应求，需求正在稳步增长。应在现有政策和技术的背景下，在现实和适应性强的环境中对这一新的劳动力进行培训。此外，由于问题的复杂性，个人必须精通广泛的相关学科，这意味着，理想情况下，在学术机构接受培训，在那里他们可以找到各种研究领域的指导。研究人员计划通过创建一个网络安全教育项目来解决这一严重的人员和技能短缺问题，该项目得到一个高效、灵活的平台的支持，该平台旨在部署真实世界的培训场景，同时整合多个著名国家网站提供的网络教育资源。在该计划中获得的技能远远适用于学术或研究环境，所开发的技术将作为网络安全培训的通用模板。该项目最重要的组成部分是人的因素--学生，未来的网络安全专家。该项目为将网络安全整合到一个极具吸引力的研究领域奠定了基础，该领域将带来极具吸引力的资格证书，从而打开一条通往长期、有回报的职业的道路。该项目与Merit Network运营的密歇根网络范围(MCR)设施以及乔治华盛顿大学专业研究学院(CPS)运营的网络学院合作，提议建立和部署一个开放和灵活的技术平台，用于广泛背景的网络安全教育和实践培训。最初，该平台将用于开发和交付针对入侵检测和补救的信用承担实践(2个信用小时)。这门课程将被转移到计算机网络保护和防御本科证书，这是网络安全学士学位完成的一部分。该实践是一次实践培训，将涵盖广泛的网络入侵、预防和检测技术，如实施和测试入侵检测系统安全计划、安全监控、入侵检测、警报管理、事件和趋势分析以及漏洞管理。该计划利用构建在思科UCS硬件平台上的高性能、灵活的环境，并采用改进的OpenStack框架。这个多租户系统最初是在国家科学基金会的拨款下开发的，有助于网络学院与MCR资源的完全整合。由于其虚拟特性及其与物理网络基础设施组件(如HPC、群集存储阵列、公共云和私有云、100G光纤网络以及各种SDN技术)的紧密耦合，该系统能够按需部署几乎任何网络安全方案。

Reasonably safe and secure cyberinfrastructures cannot be built and operated without adequately trained human beings with a broad range of applicable technical skills. Such individuals are in short supply and the demand is growing steadily. This new workforce should be trained in realistic and adaptable environments within the context of existing policies and technologies. Furthermore, due to the complexity of the problem, it is imperative that the individuals are well versed in a broad spectrum of related subjects, which means, ideally, trained at an academic institution where they can find instruction in a variety of areas of study. The researchers plan to address this critical shortage of both the people and the skills needed to meet demand by creating an educational program in cybersecurity, supported by a highly effective, flexible platform designed to deploy real-world training scenarios while integrating cybereducation resources available at multiple prominent national sites. Skills acquired in this program are applicable far beyond academic or research settings, and the developed technology will serve as a universal template for cybersecurity training. The most important component of the program is the human element - the students, the future cybersecurity experts. The project creates a foundation for consolidating Cybersecurity into an attractive field of study that leads to highly sought-after qualifications and thus opens a path to long-term, rewarding careers.In collaboration with the Michigan Cyber Range (MCR) facility operated by Merit Network, and the Cyber Academy operated by the College of Professional Studies (CPS) at the George Washington University, the project proposes to establish and deploy an open and flexible technology platform for broad-context cybersecurity education and hands-on training. Initially, the platform will be used in developing and delivering a credit bearing Practicum (2 credit hours) that addresses Intrusion Detection and Remediation. The course will be transferable toward the undergraduate certificate in Protection and Defense of Computer Networks, which is part of the Bachelor's degree completion in cybersecurity. The practicum is a hands-on training that will cover a broad range of network intrusion, prevention, and detection techniques such as implementation and testing of IDS security plans, security monitoring, intrusion detection, alarm management, analysis of events and trends, and vulnerability management. The program utilizes a high-performance, flexible environment built on Cisco's UCS hardware platform with a modified OpenStack framework. This multi-tenant system, originally developed under an NSF grant, facilitates the full integration of the Cyber Academy with the MCR resources. Thanks to its virtual nature and its tight coupling with physical cyberinfrastructure components such as HPC, cluster storage arrays, public and private clouds, 100G optical networks, and a wide variety of SDN technologies, the system is able to deploy nearly any cybersecurity scenario, on demand.