Hands-on Cybersecurity Exercises in the EDURange Framework Richard Weiss, The Evergreen State College, Olympia WA Jens Mache (&Erik Nilsen), Lewis & Clark College, Portland OR Michael E. Locasto, University of Calgary, Calgary, AB 3/6/2014 ACM SIGCSE / NSF Showcase #2 NSF DUE 1141341 & 1141314 EDURange: An Educational Cyber-Range Focus Scenarios •Focus on development of analysis skills (not tool memorization) •Focus on ease-of-use for instructors and players (cloudbased) •Thematic Approach: analysis of large, opaque artifact 3/6/2014 •Recon Game •Smart Fuzzing Calculator •Scapy Hunt Game •Trojan ELF •strace Records Analysis ACM SIGCSE / NSF Showcase #2 NSF DUE 1141341 & 1141314 EDURange Outcomes EDURange demo scenario has been used by 130 students and professors over the past year Workshops (at SIGCSE, CCSC-NW) Hackathon 9 REU students 2 undergraduate security courses SISMAT (summer program for students) New games in development 3/6/2014 ACM SIGCSE / NSF Showcase #2 NSF DUE 1141341 & 1141314 Get Involved at edurange.org http://blogs.evergreen.edu/edurange/ (feedback) https://github.com/sboesen/edurange (code) SIGCSE’14 Events BOF 30 (Spring room) Thursday 5:10pm – 6pm "Teaching Security Using Hands-On Exercises “ Workshop 23 (Hanover C) Friday 7pm – 10pm ”Hands-on Cybersecurity Exercises in the EDURange Framework “ 3/6/2014 ACM SIGCSE / NSF Showcase #2 NSF DUE 1141341 & 1141314