Combining an e-commerce simulation with a cyber-survivor exercise

ABSTRACT

A cyber-survivor exercise is an learning experience whereby each team of students attempts to defend their computer network against attacks by security educators. One of the difficulties in creating a meaningful contest is in both scoring how well each team did and in creating an environment that requires business decisions based on opportunity costs. This paper describes the design and initial implementation of a system that combines an e-commerce simulation with a cyber-survivor exercise. Some existing and some future scenarios are described.

REFERENCES

• 1: Snyder, R. CLASSY: a system to automate class administration tasks. In Proceedings of the 22nd Annual Meeting of the Southeastern Region of the Decision Sciences Institute (Savannah, GA, February 19--21, 1992).
• 2: Snyder, R. Classy: An improved system for automating class administration tasks. In Proceedings of the 30th Annual Meeting of the Southeastern Region of the Decision Sciences Institute (Wilmington, NC, February 23--25, 2000).
• 3: Snyder, R. An introduction to Classy software for automating classroom management tasks. In Proceedings of the 35th Annual Conference of the Association of Small Computer Users in Education (Myrtle Beach, SC, June 9--13, 2002).
• 4: Snyder, R. HTML form automation and web page scraping using MSXML and ASP. In Proceedings of the 31st Annual Conference of the International Business Schools Computing Association (Daytona Beach, FL, July 13--16, 2003).
• 5: Snyder, R. Using XML and COM technologies to put a textual database on the web. In Proceedings of the 32nd Annual Conference of the International Business Schools Computing Association (Pittsburgh, PA, July 11--14, 2004).
• 6: Snyder, R. A general purpose messaging system used to coordinate class and advising in a College of Business. In Proceedings of the 39th Annual Conference of the Association of Small Computer Users in Education (Myrtle Beach, SC, June 11--15, 2006).
• 7: Robin Snyder, Ethical hacking and password cracking: a pattern for individualized security exercises, Proceedings of the 3rd annual conference on Information security curriculum development, September 22-23, 2006, Kennesaw, Georgia [doi>10.1145/1231047.1231051]

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)

General Terms:
Security

Keywords:
cyber-survivor exercises, e-commerce simulation