Teaching hands-on Linux host computer security

ABSTRACT

In the summer of 2003, a project to augment and improve the teaching of information assurance courses was started at IUP. Thus far, ten hands-on exercises have been developed. The exercises described in this article, and presented in the appendix, are based on actions required to secure a Linux host. Publicly available resources were used to develop the exercises, which have been successfully utilized since spring 2003 to teach cybersecurity basics classes. The experiences and challenges encountered in teaching the course and possible future work are also described.

REFERENCES

• 1: Barrett, D.J., Silverman, R.E., and Byrnes, R.G. 2003. Linux Security CookBook. 1st ed. O'Reilly Media, Sebastopol, CA.
• 2: Davis, J. and Dark, M. 2003. Defining a curriculum framework in information assurance and security. In Staying in Tune with Engineering Education--Proceedings of the 2003 ASEE Annual Conference & Exposition (Nashville, TN, June). http://www.asee.org/acPapers/2003-2281_Final.pdf.
• 3: Garfinkel, S., Spafford, G., and Schwartz, A. 2003. Practical UNIX & Internet Security. 3rd ed. O'Reilly Media, Sebastopol, CA.
• 4: Jackson, W. 2002. Cadets keep NSA crackers at bay. Government Computer News (May 20). http://www.gcn.com/print/21_11/18671-1.html
• 5: Lockhart, A. 2004. Network Security Hacks: 100 Industrial Tips and Tools, 1^st ed. O'Reilly Media, Sebastopol, CA.
• 6: Mateti, P. 2003. A laboratory-based course on internet security. In Proceedings of the 34^th Technical Symposium on Computer Science Education (SIGCSE 2003), ACM Press, New York, 252-256.
• 7: Micco, M., and Shumba, R. 2004. Network security courses: Outcome based assessment. In PACISE Pennsylvania Association of Computer and Information Science Educators Conference (California University of PA, April 7, 2003).
• 8: Micco, M., and Rossman, H. 2002. Building a cyberwar lab: Lessons learned. In Proceedings of the 33rd Technical Symposium on Computer Science Education (SIGCSE 2002), ACM Press, New York, 23-27.
• 9: Pfleeger, C.P. 1989. Security in Computing. Prentice-Hall, Englewood Cliffs, NJ.
• 10: Shumba, R. and Micco, M. 2004. Towards a more effective way of teaching a cybersecurity basics course. In Proceedings of the 35th Technical Symposium on Computer Science Education (SIGCSE 2004), ACM Press, New York, Poster presentation, p, 500.
• 11: Smith, P.L. and Ragan, T.J. 1999. Instructional Design. 2nd ed. Wiley, New York.
• 12: Wagner, P. and Wudi, J. 2004. Designing and implementing a cyberwar laboratory exercise for a computer security course. In Proceedings of the 35^th Technical Symposium on Computer Science Education (SIGCSE 2004), ACM Press, New York, 402-406.

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.3 COMPUTERS AND EDUCATION
      K.3.2 Computer and Information Science Education
          Subjects: Curriculum

General Terms:
Security

Keywords:
Computer security, cryptography, file integrity, file permissions, host security exercises, user accounts