Teaching hands-on Linux host computer security

ABSTRACT

In the summer of 2003, a project to augment and improve the teaching of information assurance courses was started at IUP. Thus far, ten hands-on exercises have been developed. The exercises described in this article, and presented in the appendix, are based on actions required to secure a Linux host. Publicly available resources were used to develop the exercises, which have been successfully utilized since spring 2003 to teach cybersecurity basics classes. The experiences and challenges encountered in teaching the course and possible future work are also described.

REFERENCES

• 1: Daniel J. Barrett , Richard E. Silverman , Robert G. Byrnes, Linux Security Cookbook, O'Reilly & Associates, Inc., Sebastopol, CA, 2003
• 2: Davis, J. and Dark, M. 2003. Defining a curriculum framework in information assurance and security. In Staying in Tune with Engineering Education--Proceedings of the 2003 ASEE Annual Conference&Exposition (Nashville, TN, June). http://www.asee.org/acPapers/2003-2281_Final.pdf.
• 3: Simson Garfinkel , Gene Spafford , Alan Schwartz, Practical Unix & Internet Security, 3rd Edition, O'Reilly Media, Inc., 2003
• 4: Jackson, W. 2002. Cadets keep NSA crackers at bay. Government Computer News (May 20). http://www.gcn.com/print/21_11/18671-1.html
• 5: Lockhart, A. 2004. Network Security Hacks: 100 Industrial Tips and Tools, 1^st ed. O'Reilly Media, Sebastopol, CA.
• 6: Prabhaker Mateti, A laboratory-based course on internet security, Proceedings of the 34th SIGCSE technical symposium on Computer science education, February 19-23, 2003, Reno, Navada, USA
• 7: Micco, M., and Shumba, R. 2004. Network security courses: Outcome based assessment. In PACISE Pennsylvania Association of Computer and Information Science Educators Conference (California University of PA, April 7, 2003).
• 8: Mary Micco , Hart Rossman, Building a cyberwar lab: lessons learned: teaching cybersecurity principles to undergraduates, Proceedings of the 33rd SIGCSE technical symposium on Computer science education, February 27-March 03, 2002, Cincinnati, Kentucky
• 9: Charles P. Pfleeger, Security in computing, Prentice-Hall, Inc., Upper Saddle River, NJ, 1988
• 10: Rose Shumba, Towards a more effective way of teaching a cybersecurity basics course, Working group reports from ITiCSE on Innovation and technology in computer science education, June 28-30, 2004, Leeds, United Kingdom
• 11: Smith, P.L. and Ragan, T.J. 1999. Instructional Design. 2nd ed. Wiley, New York.
• 12: Paul J. Wagner , Jason M. Wudi, Designing and implementing a cyberwar laboratory exercise for a computer security course, Proceedings of the 35th SIGCSE technical symposium on Computer science education, March 03-07, 2004, Norfolk, Virginia, USA

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.3 COMPUTERS AND EDUCATION
      K.3.2 Computer and Information Science Education
          Subjects: Curriculum

General Terms:
Security

Keywords:
Computer security, cryptography, file integrity, file permissions, host security exercises, user accounts