CICI: Regional: Substrate for Cybersecurity Education; a Platform for Training, Research and Experimentation (SCEPTRE)

CICI：区域：网络安全教育基础；

• 批准号: 1642118
• 负责人: Jaroslav Flidr
• 金额: $ 49.99万
• 依托单位: George Washington University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-08-15 至 2019-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1642118&HistoricalAwards=false
• 关键词: CICI; Regional; Substrate; Cybersecurity; Education

Reasonably safe and secure cyberinfrastructures cannot be built and operated without adequately trained human beings with a broad range of applicable technical skills. Such individuals are in short supply and the demand is growing steadily. This new workforce should be trained in realistic and adaptable environments within the context of existing policies and technologies. Furthermore, due to the complexity of the problem, it is imperative that the individuals are well versed in a broad spectrum of related subjects, which means, ideally, trained at an academic institution where they can find instruction in a variety of areas of study. The researchers plan to address this critical shortage of both the people and the skills needed to meet demand by creating an educational program in cybersecurity, supported by a highly effective, flexible platform designed to deploy real-world training scenarios while integrating cybereducation resources available at multiple prominent national sites. Skills acquired in this program are applicable far beyond academic or research settings, and the developed technology will serve as a universal template for cybersecurity training. The most important component of the program is the human element - the students, the future cybersecurity experts. The project creates a foundation for consolidating Cybersecurity into an attractive field of study that leads to highly sought-after qualifications and thus opens a path to long-term, rewarding careers.In collaboration with the Michigan Cyber Range (MCR) facility operated by Merit Network, and the Cyber Academy operated by the College of Professional Studies (CPS) at the George Washington University, the project proposes to establish and deploy an open and flexible technology platform for broad-context cybersecurity education and hands-on training. Initially, the platform will be used in developing and delivering a credit bearing Practicum (2 credit hours) that addresses Intrusion Detection and Remediation. The course will be transferable toward the undergraduate certificate in Protection and Defense of Computer Networks, which is part of the Bachelor's degree completion in cybersecurity. The practicum is a hands-on training that will cover a broad range of network intrusion, prevention, and detection techniques such as implementation and testing of IDS security plans, security monitoring, intrusion detection, alarm management, analysis of events and trends, and vulnerability management. The program utilizes a high-performance, flexible environment built on Cisco's UCS hardware platform with a modified OpenStack framework. This multi-tenant system, originally developed under an NSF grant, facilitates the full integration of the Cyber Academy with the MCR resources. Thanks to its virtual nature and its tight coupling with physical cyberinfrastructure components such as HPC, cluster storage arrays, public and private clouds, 100G optical networks, and a wide variety of SDN technologies, the system is able to deploy nearly any cybersecurity scenario, on demand.

如果没有经过充分培训、掌握广泛适用技术技能的人员，就无法建立和运营相当安全可靠的网络基础设施。这样的人供不应求，需求正在稳步增长。应在现有政策和技术范围内，在现实和适应性强的环境中对这支新的劳动力队伍进行培训。此外，由于问题的复杂性，个人必须精通广泛的相关科目，这意味着理想情况下，在学术机构接受培训，在那里他们可以找到各种学习领域的指导。研究人员计划通过创建一个网络安全教育计划来解决人员和技能的严重短缺问题，该计划由一个高效，灵活的平台支持，旨在部署真实世界的培训场景，同时整合多个知名国家网站的网络教育资源。在该计划中获得的技能适用于远远超出学术或研究环境，开发的技术将作为网络安全培训的通用模板。该计划最重要的组成部分是人的因素-学生，未来的网络安全专家。该项目为将网络安全整合为一个有吸引力的研究领域奠定了基础，该领域将导致非常抢手的资格，从而开辟了一条通往长期，有价值的职业生涯的道路。与Merit Network运营的密歇根网络靶场（MCR）设施和乔治华盛顿大学专业研究学院（CPS）运营的网络学院合作，该项目提议建立和部署一个开放和灵活的技术平台，用于广泛的网络安全教育和实践培训。最初，该平台将用于开发和提供一个解决入侵检测和修复的学分实习（2学分）。该课程将转移到计算机网络保护和防御本科证书，这是网络安全学士学位完成的一部分。该实习是一个实践培训，将涵盖广泛的网络入侵，预防和检测技术，如IDS安全计划的实施和测试，安全监控，入侵检测，警报管理，事件和趋势分析，以及漏洞管理。该计划利用了一个高性能、灵活的环境，该环境构建在思科的UCS硬件平台上，并采用了经过修改的OpenStack框架。这个多租户系统最初是在NSF资助下开发的，它促进了网络学院与MCR资源的全面整合。由于其虚拟性及其与HPC、集群存储阵列、公共云和私有云、100 G光纤网络以及各种SDN技术等物理网络基础设施组件的紧密耦合，该系统能够按需部署几乎任何网络安全场景。