1 creating a virtual laboratory to teach information assurance courses online dr. wayne summers...
TRANSCRIPT
1
Creating a Virtual Laboratory to Teach Information Assurance Courses Online
Dr. Wayne Summers & Dr. Bhagyavati Columbus State UniversityColumbus, Georgia
November 12, 2004 Columbus State University 2
Challenge
How to provide students with hands-on activities teaching computer and network security courses…
…in a distance learning environment
November 12, 2004 Columbus State University 3
Typical Solution
Students use their own computers Assignments are limited by the
students’ resources
Students typically have access to only one computer and one operating system
Unwise to allow students to use their personal computers to experiment with security software
November 12, 2004 Columbus State University 4
Traditional Environment Use an isolated computer lab Students experiment with security
software without worry that their experiment may impact computer systems outside the isolated lab
In an isolated lab, students can evaluate security of different operating systems, attempt to compromise the security of computer systems, and install additional security mechanisms without concern that there actions may affect computers outside the lab
November 12, 2004 Columbus State University 5
Security and Assurance of Information Lab (SAIL)
Virtual security lab Lab is accessible by any student who
has Internet access whether they are on-campus, out-of-state, or even out of the country
Students are authenticated into the lab
Students are able to access any of the computers in the lab and complete their assignments without fear that there actions will affect computer systems outside the lab
November 12, 2004 Columbus State University 6
Security and Assurance of Information Lab (SAIL)
Hardware Configuration
VPN Concentrator
PCs
Hubs (not switches)
KVM switch
November 12, 2004 Columbus State University 9
Security and Assurance of Information Lab (SAIL)
Software Configuration VPN Concentrator Software
PCs running RealVNC (Virtual Network Computing)
http://www.realvnc.com/
Operating Systems
Security Software
November 12, 2004 Columbus State University 12
Security and Assurance of Information Lab (SAIL)
Data Confidentiality, Data Availability, Data Integrity, Data Encryption in a Windows Environment http://csc.colstate.edu/summers/NO
TES/6128/lab2.html Password Policy (and cracking)
http://csc.colstate.edu/summers/NOTES/6128/lab6.html
http://csc.colstate.edu/summers/NOTES/6128/lab6b.html
November 12, 2004 Columbus State University 13
Security and Assurance of Information Lab (SAIL)
Network Security - port scanner and security scanner (nmap & nessus) http://csc.colstate.edu/summers/NO
TES/6128/lab9.html Network Security - network
protocol analyzer (ethereal) http://csc.colstate.edu/summers/
NOTES/6128/lab10.html
November 12, 2004 Columbus State University 14
Security and Assurance of Information Lab (SAIL) - TODO
Install a Firewall in the lab Assignment on configuring a
firewall Assignment on use of a firewall
Install a router in the lab Assignment on configuring a router Assignments on router security
Duplicate assignments with Linux (compare and contrast)
Attack and Defend assignments Add more equipment modules
November 12, 2004 Columbus State University 15
Security and Assurance of Information Lab (SAIL)
THANKS Bob DuCharme and CISCO for the
training and insight
CPAK for providing equipment and initial setup
My students for putting up with the frustrations, especially Sharon Croke-Allsup & Carlos Martin who helped configure the SAIL