Open source centric information security lab development

ABSTRACT

In addition to the intellectual effort, information security lab development can require substantial organizational budget and labor commitments. For example, obtaining commercial security software necessitates a significant budget commitment. In an analogous manner, installing security software, setting up user accounts, and configuring lab systems can require a significant labor commitment. In many academic environments, obtaining the necessary budget and labor commitments for effective 'Hands On' information security lab modules is problematic.To mitigate these problems, we developed a security lab development framework with specific technological and pedagogical attributes. These attributes were specifically chosen to mitigate the previously identified constraints. Specifically, two technological attributes and one pedagogical attribute identify the framework. The two technological attributes are the utilization of Open Source Tools and the utilization of LiveCDs. The pedagogical attribute is the utilization of Kolb's Experiential Learning Model.

REFERENCES

• 1: "Bishop, M., "Computer: Art and Science", Addison Wesley, 2003.
• 2: Bishop, M., "Computer Security Education: Training, Scholarship, and Research," IEEE Computer 35 (4) Privacy and Security Supplement pp. 30--32 (Apr. 2002).
• 3: Ed Crowley, Information system security curricula development, Proceedings of the 4th conference on Information technology curriculum, October 16-18, 2003, Lafayette, Indiana, USA [doi>10.1145/947121.947178]
• 4: Fyodor, "Top 75 Security Tools", Retrieved March, 2005 from: http://www.insecure.org/tools.html
• 5: Granneman Scott, Live CD paradise, The Register, 7th May 2005 http://www.theregister.co.uk/2005/05/07/live_cd_paradise/ Retreived 1 June 05.
• 6: Hoffman, L., Dodge, R., Rosenberg, T., Ragsdale, D., "Information Assurance Laboratory Innovations", National Colloquim for Information System Security Education, Washington, D.C., 2003.
• 7: Kolb, D., "Experiential Learning", Prentice Hall, Englewood Cliffs, NJ, 1984.
• 8: Larkin-Hein, T. and Bundy, D., "Styles and Types in Science and Engineering Education", International Conference on Engineering and Computer Education, San Paulo, Brazil, August 2000.
• 9: "The LiveCD List", Retrieved March, 2005 from: http://www.frozentech.com/content/livecd.php
• 10: Millenbah, K., Campa, H., Winterstein, S., "Models for Infusing Experiential Learning into the Curriculum", Retrieved June, 2004, from http://www.snr.missouri.edu/meetings/uenr/millenbah.pdf
• 11: Venkataramanan, G., "Coupling the Laboratory - Real-world Continum into Poser Electronics Education, 2004. Retrieved March 2005, from: http://www.ece.umn.edu/groups/PowerElectronics_Drives/workshop_feb04/poster/index_poster.html/coupling.pdf
• 12: Woods, D., Banfe, P., "Involve Me and I will Understand: Effective Service Learning ... On a Platter", Academic Exchange Extra, Jan 2003. Retrieved June 2004, from http://asstudents.unco.edu/students/AE-Extra/2003/1/indxmain.htm

INDEX TERMS

Primary Classification:
  D. Software
  D.4 OPERATING SYSTEMS
      D.4.6 Security and Protection

Additional Classification:
  K. Computing Milieux
  K.3 COMPUTERS AND EDUCATION
      K.3.1 Computer Uses in Education
      K.3.2 Computer and Information Science Education
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)

General Terms:
Experimentation, Security

Keywords:
Linux, knoppix, live CD, security