Honeynet learning: discovering IT security

ABSTRACT

Learning IT Security in a classroom setting has often been a frustrating endeavor for both instructors and students alike. From our experience, traditional instructional methods like direct instruction and lectures though widely used and effective in most other areas have significant shortcomings when applied in IT security learning. In this paper, we shall propose an alternative approach to learning and teaching IT Security called Honeynet Learning which uses the Honeynet as a tool and resource to augment both student and instructor learning. This approach will incorporate the learning concepts that we feel is important to promote learning in IT Security namely discovery, feedback and "real world" experience. Aside from this, we shall be illustrating an actual methodology built upon these concepts that can be applied in the typical IT Security course.

REFERENCES

• 1: The Philippine Honeynet Project <http://www.philippineHoneynet.org>

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.3 COMPUTERS AND EDUCATION
      K.3.2 Computer and Information Science Education
          Subjects: Computer science education

Additional Classification:
  K. Computing Milieux
  K.3 COMPUTERS AND EDUCATION
      K.3.2 Computer and Information Science Education
          Subjects: Curriculum
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)

General Terms:
Management, Security

Keywords:
Honeynets, IT education, IT security, problem-based learning