EDU: Revitalizing Cyber Security Education and Research through Competitions

EDU：通过竞赛振兴网络安全教育和研究

• 批准号: 1319197
• 负责人: Jelena Mirkovic
• 金额: $ 30万
• 依托单位: University of Southern California
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2014
• 资助国家: 美国
• 起止时间: 2014-09-01 至 2017-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1319197&HistoricalAwards=false
• 关键词: EDU; Revitalizing; Cyber; Security; Education

The objective of this project is to revitalize cyber security education and research by introducing competitive aspects into their current lifecycles. The project will create and deploy light-weight, online and diverse Class Capture-The-Flag (CCTF) exercises on the DeterLab testbed. The competitions will require only modest preparation and students will engage in competitions remotely, at any time convenient for both teams. The competitions will cover a broad range of security topics, such as infrastructure threats and defenses, denial-of-service, botnet detection and infiltration, etc. Competitions will occur multiple times during a semester and will involve students from different institutions, alternating between an attacker and a defender role. To address ethical concerns about teaching students offensive technologies, the project will develop online materials on ethical offense, and will require each participant to view the materials and pass the related quiz before engaging in competitions. The project will also create a Security Challenge portal, where researchers can challenge others to break their research prototypes experimentally or by design analysis. The project team will further develop the Grand Challenge portal, hosting grand challenges in several security sub-fields. The initial grand challenges will be created by experts in selected sub-fields during virtual workshops. The Secure and Trustworthy Cyberspace (SaTC) program funds proposals that address Cybersecurity from a Trustworthy Computing Systems perspective; a Social, Behavioral and Economic Sciences perspective; and proposals focusing entirely on Cybersecurity Education.The education modules developed to accompany the CCTFs will reach student audiences that would not otherwise receive security education. Researchers that engage in security challenges will benefit from having more sound solutions and stronger publications than they would otherwise. Grand challenges will engage multiple teams competing towards the common goal, galvanizing research on that specific class of problems. Further, security challenges and grand challenges will promote better security metrics, experiment methodologies and code and data sharing. This will improve the quality of security research, and the science of security experimentation. The educational modules that cover topics related to each CCTF exercise will enable participation by underprivileged and minority institutions that may not regularly teach a security class.

该项目的目的是通过将竞争性方面引入当前的生命周期来振兴网络安全教育和研究。该项目将在Deterlab测试台上创建和部署轻量级，在线和多样化的类捕获量（CCTF）练习。比赛只需要适度的准备，学生将在两支球队方便的任何时候远程参加比赛。比赛将涵盖广泛的安全主题，例如基础设施威胁和辩护，拒绝服务，僵尸网络检测和渗透等。竞赛将在一个学期期间多次举行，并将参与来自不同机构的学生，在攻击者和防御者角色之间交替。为了解决有关教学学生进攻技术的道德问题，该项目将开发有关道德犯罪的在线材料，并要求每个参与者在参加比赛之前查看材料并通过相关测验。该项目还将创建一个安全挑战门户网站，研究人员可以在其中挑战其他人，以实验或设计分析来打破其研究原型。项目团队将进一步发展大挑战门户网站，并在几个安全子场中进行了巨大的挑战。最初的大挑战将由虚拟研讨会期间选定子场的专家创建。安全且值得信赖的网络空间（SATC）计划资金基金提案，从可信赖的计算系统的角度来解决网络安全；社会，行为和经济科学的观点；以及完全关注网络安全教育的建议。为伴随央视而开发的教育模块将吸引学生的受众群体，而这些听众否则就不会接受安全教育。从事安全挑战的研究人员将受益于拥有更多的合理解决方案和更强大的出版物。巨大的挑战将与多个团队竞争共同的目标，使对特定类别的问题的研究激发研究。此外，安全挑战和巨大的挑战将促进更好的安全指标，实验方法以及代码和数据共享。这将提高安全研究的质量和安全实验科学。涵盖与每个CCTF练习有关的主题的教育模块将使贫困和少数族裔机构的参与可能不会定期教安全课。