CICI: Regional: Substrate for Cybersecurity Education; a Platform for Training, Research and Experimentation (SCEPTRE)

如果没有受过充分培训并具备广泛适用技术技能的人员，就无法建立和运营合理安全和可靠的网络基础设施。这样的人才供不应求，而需求却在稳步增长。应该在现有政策和技术的范围内，在现实和适应性强的环境中对这些新的劳动力进行培训。此外，由于问题的复杂性，个人必须精通广泛的相关学科，这意味着，理想情况下，在学术机构接受培训，在那里他们可以找到各种研究领域的指导。研究人员计划通过创建一个网络安全教育项目来解决这一人员和技能的严重短缺问题，该项目由一个高效、灵活的平台支持，该平台旨在部署现实世界的培训场景，同时整合多个著名国家网站的网络教育资源。在该项目中获得的技能适用范围远远超出学术或研究环境，开发的技术将作为网络安全培训的通用模板。该计划最重要的组成部分是人的因素——学生，未来的网络安全专家。该项目为将网络安全整合为一个有吸引力的研究领域奠定了基础，该研究领域将导致高度抢手的资格，从而开辟了一条通往长期、有回报的职业道路。通过与Merit Network运营的密歇根网络靶场（MCR）设施和乔治华盛顿大学专业研究学院（CPS）运营的网络学院合作，该项目建议建立和部署一个开放和灵活的技术平台，用于广泛的网络安全教育和实践培训。最初，该平台将用于开发和交付一门涉及入侵检测和补救的学分实习课程（2学时）。该课程将被转换为计算机网络保护和防御的本科证书，这是网络安全学士学位完成的一部分。这是一项实务训练，将涵盖广泛的网络入侵、预防和检测技术，例如IDS安全计划的实施和测试、安全监控、入侵检测、警报管理、事件和趋势分析以及漏洞管理。该项目利用基于思科UCS硬件平台的高性能、灵活的环境，并采用改进的OpenStack框架。这个多租户系统最初是在美国国家科学基金会的资助下开发的，它促进了网络学院与MCR资源的全面整合。由于其虚拟特性以及与物理网络基础设施组件（如HPC、集群存储阵列、公共和私有云、100G光网络以及各种SDN技术）的紧密耦合，该系统能够根据需要部署几乎任何网络安全场景。

Reasonably safe and secure cyberinfrastructures cannot be built and operated without adequately trained human beings with a broad range of applicable technical skills. Such individuals are in short supply and the demand is growing steadily. This new workforce should be trained in realistic and adaptable environments within the context of existing policies and technologies. Furthermore, due to the complexity of the problem, it is imperative that the individuals are well versed in a broad spectrum of related subjects, which means, ideally, trained at an academic institution where they can find instruction in a variety of areas of study. The researchers plan to address this critical shortage of both the people and the skills needed to meet demand by creating an educational program in cybersecurity, supported by a highly effective, flexible platform designed to deploy real-world training scenarios while integrating cybereducation resources available at multiple prominent national sites. Skills acquired in this program are applicable far beyond academic or research settings, and the developed technology will serve as a universal template for cybersecurity training. The most important component of the program is the human element - the students, the future cybersecurity experts. The project creates a foundation for consolidating Cybersecurity into an attractive field of study that leads to highly sought-after qualifications and thus opens a path to long-term, rewarding careers.In collaboration with the Michigan Cyber Range (MCR) facility operated by Merit Network, and the Cyber Academy operated by the College of Professional Studies (CPS) at the George Washington University, the project proposes to establish and deploy an open and flexible technology platform for broad-context cybersecurity education and hands-on training. Initially, the platform will be used in developing and delivering a credit bearing Practicum (2 credit hours) that addresses Intrusion Detection and Remediation. The course will be transferable toward the undergraduate certificate in Protection and Defense of Computer Networks, which is part of the Bachelor's degree completion in cybersecurity. The practicum is a hands-on training that will cover a broad range of network intrusion, prevention, and detection techniques such as implementation and testing of IDS security plans, security monitoring, intrusion detection, alarm management, analysis of events and trends, and vulnerability management. The program utilizes a high-performance, flexible environment built on Cisco's UCS hardware platform with a modified OpenStack framework. This multi-tenant system, originally developed under an NSF grant, facilitates the full integration of the Cyber Academy with the MCR resources. Thanks to its virtual nature and its tight coupling with physical cyberinfrastructure components such as HPC, cluster storage arrays, public and private clouds, 100G optical networks, and a wide variety of SDN technologies, the system is able to deploy nearly any cybersecurity scenario, on demand.