.   +---------------------+      
+---|---------------------|-------.    .---_||||||_-----------------.   
|:--|-----\\\\\//////-----|--. o   ----                          (\)| 
|#|||------         ------|--.||      [  Peter A. H. Peterson       | 
|-::|-----|.-,   ,-.|-----|===========[  Assistant Professor of CS  |  
|o+o|----(| @ |   @ |)----|:::::::::::[  329 Heller Hall            | 
||o||-----#  '-'    #-----|:::::::::::[  1114 Kirby Drive           | 
|||||------\"==="  /------|===========[  Duluth, MN 55812           | 
|||||-------`-----'|------| | o       [  pahp@d.umn.edu             | 
||/ |.----/'\'-----'/\---.|-+-'       [  pedro@tastytronic.net_  (/)|   
||^_|     '''|     |''    |-----'''----||||-||||||||||-||||||||||.  |  
||| +---------------------+-----------'                          | :| 
|:|                                                              |:.|
| '------------.  [back to research]                             |.:|
| home         |                                                 |:.| 
'------------. |  Computer Security                              |.:|
.------------' |                                                 |:.|      
| cv           |  Computer Security is a part of the Online      |.:|      
| .------------'  Masters (OLMS) program in Engineering at       |:.|      
| '------------.  UCLA. The traditional, "brick and mortar"      |.:|      
| research     |  graduate course in computer security focuses   |:.|      
'------------. |  heavily on group research projects, which      |.:|      
.------------' |  inevitably get students interacting with  the  |:.|      
| interests    |  practical and theoretical issues inherent in   |.:|      
| .------------'  computer security. However, these projects     |:.|      
| '------------.  involve lots of in person group                |.:|      
| blog         |  collaboration, including meetings with Dr.     |:.|      
'------------. |  Reiher, which were impractical for an online   |.:|      
.------------' |  class. Instead, Dr. Reiher felt that           |:.|      
| reading      |  individual projects were more appropriate.     |.:|      
| .------------'  Obviously, they needed to be completely        |:.|      
| '------------.  accessible online, and should cover both       |.:|      
| quotes       |  practical and theoretical issues in computer   |:.|      
'------------. |  security.                                      |.:|      
.------------' |                                                 |:.|      
| contact      |  To meet these criteria, we developed a series  |.:|      
|              |  of exercises using the DETER testbed. DETER    |:.|      
|''''''''''''''|  is a security-oriented testbed based on        |.:|      
| 001010101101 |  Emulab. With DETER, users are allocated        |:.|      
| 011011011001 |  physical nodes with reconfigurable networks.   |.:|      
| 010011011011 |  This allowed us to create immersive network    |:.|      
| 110011010111 |  environments using real software, including    |.:|      
| 100100001100 |  standard security tools such as nmap,          |:.|      
| 101001100111 |  Ettercap, tcpdump, and more. The scenarios     |.:|      
| 001101100101 |  cover topics such as POSIX permissions and     |:.|      
| 001111000000 |  firewalls,  software exploits, computer        |.:|      
| 001010101101 |  forensics, network intrusion detection, and    |:.|      
| 011011011001 |  "man-in-the-middle" and other network          |.:|      
| 010011011011 |  attacks. Exercise environments are created     |:.|      
| 110011010111 |  and torn down on demand for each student.      |.:|      
| 100100001100 |  Along with the software supporting these       |:.|      
| 101001100111 |  exercises, the exercises include extensive     |.:|      
| 001101100101 |  manuals covering background information,       |:.|      
| 001111000000 |  additional reading material, and more.         |.:|      
| 001010101101 |                                                 |:.|      
| 011011011001 |  The exercises have been extremely successful   |.:|      
| 010011011011 |  at UCLA, and the DETER project has actively    |:.|      
| 110011010111 |  fostered the use of the testbed for security   |.:|      
| 100100001100 |  education, setting up a Moodle server (an      |:.|      
| 101001100111 |  open source course management system) for the  |.:|      
| 001101100101 |  management of classes, class materials, and    |:.|      
| 001111000000 |  more. We are continually updating our          |.:|      
| 001010101101 |  exercises, helping other colleges and          |:.|      
| 011011011001 |  universities use the exercises in their        |.:|      
| 010011011011 |  courses, and planning to add new exercises in  |:.|      
| 110011010111 |  the future. In addition, we've developed some  |.:|      
| 100100001100 |  meta-tools for exercise management that may    |:.|      
| 101001100111 |  eventually see public release.                 |.:|      
| 001101100101 |                                                 |:.|      
| 001111000000 |  For more information about our security labs,  |.:|      
| 001010101101 |  please contact us, read our paper, a broader   |:.|      
| 011011011001 |  paper on using testbeds to teach security, or  |.:|      
| 010011011011 |  visit DETER's education site.                  |:.|      
| 110011010111 |                                                 |.:|      
| 100100001100 |  [back to research]                             |:.|      
| 101001100111 |                                                 |.:|      
|'''''''''''''''-------------------------------------------------'::'. 
|::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::| 
`=======---------.______.-------:::::::-:------------------------. ? | 
                                                                  ---'