Developing and Delivering Hands-On Information Assurance Exercises: Experiences with the Cyber Defense Lab at UMBC
dc.contributor.author | Sherman, Alan T. | |
dc.contributor.author | Roberts, Brian O. | |
dc.contributor.author | Byrd, William E. | |
dc.contributor.author | Baker, Matthew R. | |
dc.contributor.author | Simmons, John | |
dc.date.accessioned | 2019-03-05T19:46:19Z | |
dc.date.available | 2019-03-05T19:46:19Z | |
dc.date.issued | 2005-06-10 | |
dc.description | Workshop on Information Assurance and Security | en_US |
dc.description.abstract | In summer 2003, we developed four new hands-on information assurance educational exercises for use in the UMBC undergraduate and graduate curricula. Exercise topics comprise buffer overflow attacks, vulnerability scanning, password security and policy, and flaws in the Wired Equivalent Privacy (WEP) protocol. During each exercise, each student carries out structured activities using a laptop from a mobile cart that can be rolled into any classroom. These dedicated, isolated machines permit a student to make mistakes safely, even while acting as the system administrator, without adversely affecting any other user. Each exercise is organized in a modular fashion to facilitate varied use for different courses, levels, and available time. Our experiences delivering these exercises show that practical hands-on activities motivate students and enhance learning. In this paper we describe our exercises and share lessons learned, including the importance of careful planning, ethical considerations, the rapid obsolescence of tools, and the difficulty of including exercises in already busy courses. | en_US |
dc.description.uri | https://ieeexplore.ieee.org/document/1437823 | en_US |
dc.format.extent | 8 pages | en_US |
dc.genre | conference proceedings and papers preprints | en_US |
dc.identifier | doi:10.13016/m2gbsj-hlk4 | |
dc.identifier.citation | Alan T. Sherman, Brian O. Roberts, William E. Byrd, Matthew R. Baker, John Simmons, Developing and Delivering Hands-On Information Assurance Exercises: Experiences with the Cyber Defense Lab at UMBC, Proceedings from the Fifth Annual IEEE SMC Information Assurance Workshop, 2004., DOI: 10.1109/IAW.2004.1437823 | en_US |
dc.identifier.uri | https://doi.org/10.1109/IAW.2004.1437823 | |
dc.identifier.uri | http://hdl.handle.net/11603/12937 | |
dc.language.iso | en_US | en_US |
dc.publisher | IEEE | en_US |
dc.relation.isAvailableAt | The University of Maryland, Baltimore County (UMBC) | |
dc.relation.ispartof | UMBC Center for Research and Exploration in Space Sciences & Technology II (CRSST II) | |
dc.relation.ispartof | UMBC Computer Science and Electrical Engineering Department | |
dc.rights | This item is likely protected under Title 17 of the U.S. Copyright Law. Unless on a Creative Commons license, for uses protected by Copyright Law, contact the copyright holder or the author. | |
dc.rights | ©2004 IEEE | |
dc.subject | buffer overflow | en_US |
dc.subject | computer security education | en_US |
dc.subject | cyber defense exercises | en_US |
dc.subject | information assurance education | en_US |
dc.subject | password security | en_US |
dc.subject | scanning vulnerabilities | en_US |
dc.subject | UMBC Cyber Defense Lab | en_US |
dc.subject | wired equivalent privacy (WEP) | en_US |
dc.title | Developing and Delivering Hands-On Information Assurance Exercises: Experiences with the Cyber Defense Lab at UMBC | en_US |
dc.type | Text | en_US |