SaTC: EDU: Online Digital Forensics Courses and Labs for Students and Professionals

SaTC：EDU：为学生和专业人士提供的在线数字取证课程和实验室

• 批准号: 1802701
• 负责人: Yier Jin
• 金额: $ 29.9万
• 依托单位: University of Florida
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2017
• 资助国家: 美国
• 起止时间: 2017-11-01 至 2021-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1802701&HistoricalAwards=false
• 关键词: SaTC; EDU; Online; Digital; Forensics

In the current Internet-connected world, most companies, government agencies, and the public heavily rely on the cyber world for information and data management, processing, and exchange. Information leakage and data breaches have become increasingly damaging to businesses, the government, and people's lives. Correspondingly, hackers have more incentive to attack for financial and political gains. While the existing cybersecurity curricula focus on defensive solutions, this proposed online program from the University of Central Florida attempts to provide both defensive and post-attack digital forensics curriculum for dedicated digital forensics students and professionals. This project will enrich the future cybersecurity workforce with both preventative and post-attack digital forensics skills to effectively counter the cause and effect of cyber-attacks. This program will also help alleviate shortages of qualified digital forensic researchers and practitioners in cybersecurity areas.Specifically, in this project, the researchers will build an online digital forensics program including two introductory courses and seven hands-on labs. The program will help build the necessary background for students and professionals to perform high pressure, skilled post-attack digital forensics analysis and incident responses. Students and professionals will acquire digital forensics knowledge to tackle future challenges in emerging cyber-systems such as networked critical infrastructures. Meanwhile, as computers and smart devices penetrate every aspect of our life, digital forensics training should not only cover traditional personal computers but also emerging smart devices, including smart phones and Internet of Things (IoT). Upon this request, this program also includes course materials and hands-on labs on forensic analysis of smart phones and IoT devices. The principal outcomes of the project will be enhancing cybersecurity curricula to include digital forensics courses and hands-on lab modules that focus on evaluating and analyzing cyber-attacks and countermeasures at the post-attack stage. Through this project, students and professionals will be prepared with the digital forensics knowledge necessary for them to undertake specific roles in future cybersecurity and digital forensics careers. Further, hands-on labs are emphasized in the project since these can help students solidify their knowledge from coursework and will eventually prepare them for real-world cybersecurity challenges.

在当前互联网连接的世界中，大多数公司，政府机构和公众严重依赖网络世界进行信息和数据管理，处理和交换。信息泄露和数据泄露对企业、政府和人们的生活造成的损害越来越大。相应地，黑客更有动机为经济和政治利益而攻击。虽然现有的网络安全课程侧重于防御解决方案，但中央佛罗里达大学提出的在线计划试图为专门的数字取证学生和专业人士提供防御和攻击后的数字取证课程。该项目将通过预防和攻击后数字取证技能丰富未来的网络安全工作人员，以有效应对网络攻击的因果关系。该项目还将帮助缓解网络安全领域合格的数字取证研究人员和从业人员的短缺。具体而言，在该项目中，研究人员将建立一个在线数字取证项目，包括两个入门课程和七个动手实验室。该计划将帮助学生和专业人士建立必要的背景，以执行高压，熟练的攻击后数字取证分析和事件响应。学生和专业人士将获得数字取证知识，以应对新兴网络系统（如网络关键基础设施）的未来挑战。与此同时，随着计算机和智能设备渗透到我们生活的各个方面，数字取证培训不仅应涵盖传统的个人计算机，还应涵盖新兴的智能设备，包括智能手机和物联网（IoT）。根据这一要求，该计划还包括关于智能手机和物联网设备法医分析的课程材料和实践实验室。该项目的主要成果将是加强网络安全课程，包括数字取证课程和动手实验室模块，重点是评估和分析网络攻击和攻击后阶段的对策。通过这个项目，学生和专业人士将准备与必要的数字取证知识，让他们在未来的网络安全和数字取证职业中承担特定的角色。此外，该项目强调了动手实验室，因为这些可以帮助学生巩固他们的课程知识，并最终为现实世界的网络安全挑战做好准备。

项目成果

Invariant Diversity as a Proactive Fraud Detection Mechanism for Online Merchants

不变多样性作为在线商家的主动欺诈检测机制

• DOI: 10.1109/glocom.2017.8254499
• 发表时间: 2017
• 期刊: GLOBECOM 2017 - 2017 IEEE Global Communications Conference
• 作者: Laurens, Roy;Jusak, Jusak;Zou, Cliff C.
• 通讯作者: Zou, Cliff C.

Deterministic Sub-Wallet for Cryptocurrencies

加密货币的确定性子钱包

• 发表时间: 2019
• 期刊: IEEE International Conference on Blockchain
• 作者: Rezaeighaleh, Hossein;Zou, Cliff
• 通讯作者: Zou, Cliff

Circumvent traffic shaping using virtual wireless clients in IEEE 802.11 wireless local area network

在 IEEE 802.11 无线局域网中使用虚拟无线客户端规避流量整形

• DOI: 10.1109/milcom.2017.8170854
• 发表时间: 2017
• 期刊: MILCOM 2017 - 2017 IEEE Military Communications Conference (MILCOM
• 作者: Nakhila, Omar;Zou, Cliff
• 通讯作者: Zou, Cliff

DDIFT: Decentralized Dynamic Information Flow Tracking for IoT Privacy and Security

DDIFT：用于物联网隐私和安全的去中心化动态信息流跟踪

• DOI: 10.14722/diss.2019.23007
• 发表时间: 2019
• 期刊: Workshop on Decentralized IoT Systems and Security (DISS
• 作者: Sapountzis, Nikolaos;Sun, Ruimin;Oliveira, Daniela
• 通讯作者: Oliveira, Daniela

Device attestation: Past, present, and future

设备认证：过去、现在和未来

• DOI: 10.23919/date.2018.8342055
• 发表时间: 2018
• 期刊: Automation & Test in Europe Conference & Exhibition (DATE
• 作者: Arias, Orlando;Rahman, Fahim;Tehranipoor, Mark;Jin, Yier
• 通讯作者: Jin, Yier