Experiential learning and security lab design

ABSTRACT

Awareness of the need for Information Systems Security continues to expand. This expansion has created a need for security focused lab modules. By design, these lab modules should optimize student learning experiences. Incorporating Kolb's experiential learning model helps assure an optimum learning experience. This paper, presents procedures and methodologies utilized in developing security lab modules. These modules illustrate the application of Kolb's experiential learning model.

REFERENCES

• 1: Bishop, M., "Computer Security Education: Training, Scholarship, and Research," IEEE Computer 35 (4) Privacy and Security Supplement pp. 30--32 (Apr. 2002).
• 2: "Cert/CC Overview", CERT Coordination Center, Software Engineering Institute, Carnegie Mellon University Pittsburg, PA, 2003. Retrieved June 2004, from: http://www.cert.org/present/cert-overview-trends/module-1.pdf
• 3: Eric Cole , Matthew Newfield , Stephen Northcutt , John M. Millican, GSEC Security Essentials Toolkit, Que Corp., Indianapolis, IN, 2002
• 4: Ed Crowley, Information system security curricula development, Proceedings of the 4th conference on Information technology curriculum, October 16-18, 2003, Lafayette, Indiana, USA [doi>10.1145/947121.947178]
• 5: Dark, M., and Davis, J., "Report on Information Assurance Curriculum Development", June 2002.
• 6: Davis, J. and Dark, M., "Defining a curriculum framework in Information Assurance and Security", 2003 ASEE Annual Conference, Nashville, TN, June 2003.
• 7: Hoffman, L., Dodge, R., Rosenberg, T., Ragsdale, D., "Information Assurance Laboratory Innovations", National Colloquim for Information System Security Education, Washington, D.C., 2003.
• 8: Kolb, D., "Experiential Learning", Prentice Hall, Englewood Cliffs, NJ, 1984.
• 9: Larkin-Hein, T. and Bundy, D., "Styles and Types in Science and Engineering Education", International Conference on Engineering and Computer Education, San Paulo, Brazil, August 2000.
• 10: Longstaff, T., Ellis, J., Hernan,S., Lipson, H., McMillan,R., Pesante, L., Simmel. D., "Security of the Internet", The Froehlich/Kent Encyclopedia of Telecommunications vol. 15, pp. 231--255, New York: Marcel Dekker, 1997.
• 11: Millenbah, K., Campa, H., Winterstein, S., "Models for Infusing Experiential Learning into the Curriculum", Retrieved June, 2004, from http://www.snr.missouri.edu/meetings/uenr/millenbah.pdf
• 12: Mitre, "Defense-Information Assurance Red Team", The Mitre Digest, 15 Oct 2000. As referenced 20 June at: http://www.mitre.org/news/digest/archives/2000/defense_red_team.html
• 13: Sylvia Perez-Hardy, A unique experiential model for teaching network administration, Proceedings of the 4th conference on Information technology curriculum, October 16-18, 2003, Lafayette, Indiana, USA [doi>10.1145/947121.947147]
• 14: Stice, J., "Using Kolb's Learning Cycle to Improve Student Learning". Engineering Education, Feb 1987, pp. 291--296.
• 15: Venkataramanan, G., "Coupling the Laboratory - Real-world Continum into Power Electronics Education, 2004. Retrieved June 2004, from: http://www.ece.umn.edu/groups/PowerElectronics_Drives/workshop_feb04/poster/coupling.pdf
• 16: Wankat, P. & Oreovicz, "Teaching engineering" New York, McGraw-Hill, 1993. Retrieved June 2004, from: https://engineering.purdue.edu/ChE/News_and_Events/Publications/teaching_engineering
• 17: Wilson, N., Nelson, R., "Experimental Economics in the Agribusiness Classroom", 2000 IAMA Food and Agribusiness Forum, Chicago, IL, 2000.
• 18: Woods, D., Banfe, P., "Involve Me and I will Understand: Effective Service Learning -- On a Platter", Academic Exchange Extra, Jan 2003. Retrieved June 2004, from http://asstudents.unco.edu/students/AE-Extra/2003/1/indxmain.html

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)
          Subjects: Unauthorized access (e.g., hacking, phreaking)

Additional Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.4 System Management
          Subjects: Management audit

General Terms:
Experimentation, Security

Keywords:
TCP/IP, internet security, lab design, network security