A security laboratory for CTF scenarios and teaching IDS
A security laboratory for CTF scenarios and teaching IDS
复制标题
CTF场景和教学IDS的安全实验室
DOI：
--
复制
发表时间：
2010
期刊：
影响因子：
--
通讯作者：
C. Meinel
中科院分区：
文献类型：
--
作者：
S. Roschke;Christian Willems;C. Meinel
现代攻击使用复杂和创新的技术。教学和培训方案必须侧重于安全的实际方面，即，攻击技术和防御方法，如入侵检测系统（IDS）。团队练习提供了一种有效的方法来增加安全方面的实践经验，因为每个团队都可以在相互学习的同时收集进攻和防守技术方面的知识。拟议的实验室通过提供实际场景来练习攻击和防御，提供有效的安全培训。这些方案被自动参数化和配置，以提高可扩展性。通过使用虚拟化组件和专用网络基础架构组件，我们可以创建反映真实的网络环境的复杂场景。我们设计并实现了几个具有不同难度的场景。最后，基于多个培训课程中的场景执行，描述了学生和教师的教学经验。
Modern attacks are using sophisticated and innovative techniques. Teaching and training programs have to focus on the practical aspects of security, i.e., on attack techniques and defense methods, such as Intrusion Detection Systems (IDS). Team exercises provide an effective method to increase practical experience in security, as each team can gather knowledge on offensive as well as defensive techniques while learning from each other. The proposed laboratory provides effective security training by offering practical scenarios to practice attack and defense. The scenarios are parameterized and configured automatically to improve manageability. By using virtualized components as well as dedicated network infrastructure components, we can create complex scenarios that reflect real network environments. We designed and implemented several scenarios with various levels of difficulty. Finally, the teaching experiences for students and teachers are described based on the execution of the scenarios in multiple training sessions.