Collaborative Research: TUES: Type 1: EDURange: A Cybersecurity Competition Platform to Enhance Undergraduate Security Analysis Skills

合作研究：TUES：类型 1：EDURange：提高本科生安全分析技能的网络安全竞赛平台

• 批准号: 1141341
• 负责人: Richard Weiss
• 金额: $ 12万
• 依托单位: Evergreen State College
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2012
• 资助国家: 美国
• 起止时间: 2012-08-15 至 2016-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1141341&HistoricalAwards=false
• 关键词: Collaborative; Research; TUES; Type; EDURange

The objective of this project is to develop a cybersecurity lab environment (EDURange) that is open to the public and allows creation of custom exercises in a 'live-fire' setting. It is designed to provide students with an active learning environment focusing on analysis skills rather than on training based on a pre-packaged set of tools. Preparing cybersecurity exercises is a major obstacle in many academic programs but the proposed environment is simple enough that faculty with limited knowledge of cybersecurity can employ it in the classroom. The exercises are accompanied by tutorials linked to learning objectives. EDURange's design, its lab scenarios and scoring system, reward the effort that students spend on analysis and reverse-engineering.The proposed project focuses on: (1) the construction and deployment of cybersecurity scenarios in local and cloud environments; and (2) using the scenarios as an assessment tool for both students in the course of their studies as well as an independent benchmark for other cybersecurity training curricula. EDURange scenarios are well-documented and of varying difficulty and complexity to make them attractive to a wide range of academic programs and institutions. The scenarios are hosted in a publicly available cybersecurity testbed and in a cloud environment. The project includes outreach activities at the annual SIGCSE conference.

该项目的目标是开发一个向公众开放的网络安全实验室环境（EDURange），并允许在“实弹”环境中创建自定义练习。它旨在为学生提供一个积极的学习环境，重点关注分析技能，而不是基于预先打包的工具集的培训。准备网络安全练习是许多学术项目的主要障碍，但所提出的环境足够简单，网络安全知识有限的教师可以在课堂上使用它。这些练习附有与学习目标相关的教程。 EDURange的设计、实验室场景和评分系统奖励了学生在分析和逆向工程上所付出的努力。拟议项目的重点是：（1）本地和云环境中网络安全场景的构建和部署； (2) 使用这些场景作为学生学习过程中的评估工具以及其他网络安全培训课程的独立基准。 EDURange 场景有详细记录，并且具有不同的难度和复杂性，这使其对广泛的学术项目和机构具有吸引力。这些场景托管在公开可用的网络安全测试台和云环境中。该项目包括年度 SIGCSE 会议上的外展活动。