1 Creating a Virtual Laboratory to Teach Information Assurance Courses Online Dr. Wayne Summers & Dr. Bhagyavati Columbus State University Columbus, Georgia

November 12, 2004Columbus State University2 Challenge How to provide students with hands- on activities teaching computer and network security courses… …in a distance learning environment

November 12, 2004Columbus State University3 Typical Solution Students use their own computers Assignments are limited by the students’ resources Students typically have access to only one computer and one operating system Unwise to allow students to use their personal computers to experiment with security software

November 12, 2004Columbus State University4 Traditional Environment Use an isolated computer lab Students experiment with security software without worry that their experiment may impact computer systems outside the isolated lab In an isolated lab, students can evaluate security of different operating systems, attempt to compromise the security of computer systems, and install additional security mechanisms without concern that there actions may affect computers outside the lab

November 12, 2004Columbus State University5 Security and Assurance of Information Lab (SAIL) Virtual security lab Lab is accessible by any student who has Internet access whether they are on- campus, out-of-state, or even out of the country Students are authenticated into the lab Students are able to access any of the computers in the lab and complete their assignments without fear that there actions will affect computer systems outside the lab

November 12, 2004Columbus State University6 Security and Assurance of Information Lab (SAIL) Hardware Configuration VPN Concentrator PCs Hubs (not switches) KVM switch

November 12, 2004Columbus State University7 Security and Assurance of Information Lab (SAIL)

November 12, 2004Columbus State University8 Security and Assurance of Information Lab (SAIL)

November 12, 2004Columbus State University9 Security and Assurance of Information Lab (SAIL) Software Configuration VPN Concentrator Software PCs running RealVNC (Virtual Network Computing) Operating Systems Security Software

November 12, 2004Columbus State University10 Security and Assurance of Information Lab (SAIL)

November 12, 2004Columbus State University11 Security and Assurance of Information Lab (SAIL)

November 12, 2004Columbus State University12 Security and Assurance of Information Lab (SAIL) Data Confidentiality, Data Availability, Data Integrity, Data Encryption in a Windows Environment /lab2.html /lab2.html Password Policy (and cracking) /lab6.html /lab6.html /lab6b.html /lab6b.html

November 12, 2004Columbus State University13 Security and Assurance of Information Lab (SAIL) Network Security - port scanner and security scanner (nmap & nessus) /lab9.html /lab9.html Network Security - network protocol analyzer (ethereal) /lab10.html

November 12, 2004Columbus State University14 Security and Assurance of Information Lab (SAIL) - TODO Install a Firewall in the lab Assignment on configuring a firewall Assignment on use of a firewall Install a router in the lab Assignment on configuring a router Assignments on router security Duplicate assignments with Linux (compare and contrast) Attack and Defend assignments Add more equipment modules

November 12, 2004Columbus State University15 Security and Assurance of Information Lab (SAIL) THANKS Bob DuCharme and CISCO for the training and insight CPAK for providing equipment and initial setup My students for putting up with the frustrations, especially Sharon Croke- Allsup & Carlos Martin who helped configure the SAIL

November 12, 2004Columbus State University16 Security and Assurance of Information Lab (SAIL) Questions?