SATC: EDU: Network Design for Security using Protocol Trust Boundary Observations

“网络安全”是电气/计算机工程或计算机科学或技术专业硕士和学士学位课程中的一门典型核心课程。该项目将“网络安全”与“软件系统安全”联系起来，其中坚实的教育基础一直在使用具有有效工具和相关防御和缓解技术的威胁建模。这种新方法使网络安全教育能够使用适用于信息系统安全的相同原则。也就是说，通过将每个网络系统视为软件系统的集合，该项目将使为软件系统安全教育开发的技术能够用于网络安全教育。该项目的主要目标是创建新颖的教学材料，从网络设计过程中内置的安全态势的角度教授网络安全，重点是创建协议行为知识模块，通过动手实验室实验，即时反馈，对学习的反思以及用于应用所获得知识的综合项目组件来增强信任边界分析。教学材料是由讲座模块，文档，实验室模块与网络拓扑结构，扩展机制，为其他教师创建新的网络模型，和动手实验室系统，是基于笔记本电脑，基于Web的交互式计算平台，支持不同的学习风格。实验材料包括加载在笔记本电脑中的练习，并通过实验系统自动评分，以便对特定概念的学习进行即时反馈。问题描述符也是开源的，可供采用的教师在特定的教学材料中定制自己的学习目标。该教材通过提供平等的机会机制沿着多种形式的现代界面概念交付，在吸引和留住代表性不足的少数民族和女学生到外地方面产生了更广泛的影响，该奖项反映了NSF的法定使命，并被认为值得通过使用基金会的知识价值和更广泛的影响审查标准进行评估予以支持。

"Network security" is a typical core course in master's and bachelor's level curricula in electrical/computer engineering or computer science or technology. This project makes a novel attempt to relate "Network Security" to "Software Systems Security", where a solid educational foundation has been using threat modeling with effective tools and associated defense and mitigation techniques. This novel approach enables network security education to use the same principles that apply to information systems security. Namely, by viewing each network system as a collection of software systems, this project will enable the use of techniques developed for Software Systems Security education for Network Security education.The main goal of this project is to create novel instructional material to teach network security from the perspective of a built-in security posture within the network design process, with a focus on the creation of protocol behavior knowledge modules with a trust boundary analysis enhanced through hands-on lab experiments, instantaneous feedback, reflections on learnings, as well as a comprehensive project component for application of the gained knowledge. The instructional material is composed of lecture modules, documentation, lab modules with network topologies, an extension mechanism for other instructors to create new network models, and a hands-on lab system that is based on the Jupyter Notebooks, a web-based interactive computing platform supportive of diverse learning styles. The lab material includes exercises that load within the Jupyter Notebooks and are auto-graded through the lab system for immediate feedback on learnings of specific concepts. The question descriptors are also open source and available for the adopting instructors to tailor to their own learning objectives in specific offerings of the instructional material. The instructional material has a broader impact in attracting and retaining underrepresented minorities and female students to the field by providing equitable access mechanisms along with multiple forms of delivery of the concepts in modern interfaces.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.