1

Creating a Virtual Laboratory to Teach Information Assurance Courses Online

Dr. Wayne Summers & Dr. Bhagyavati Columbus State UniversityColumbus, Georgia

November 12, 2004 Columbus State University 2

Challenge

How to provide students with hands-on activities teaching computer and network security courses…

…in a distance learning environment

November 12, 2004 Columbus State University 3

Typical Solution

Students use their own computers Assignments are limited by the

students’ resources

Students typically have access to only one computer and one operating system

Unwise to allow students to use their personal computers to experiment with security software

November 12, 2004 Columbus State University 4

Traditional Environment Use an isolated computer lab Students experiment with security

software without worry that their experiment may impact computer systems outside the isolated lab

In an isolated lab, students can evaluate security of different operating systems, attempt to compromise the security of computer systems, and install additional security mechanisms without concern that there actions may affect computers outside the lab

November 12, 2004 Columbus State University 5

Security and Assurance of Information Lab (SAIL)

Virtual security lab Lab is accessible by any student who

has Internet access whether they are on-campus, out-of-state, or even out of the country

Students are authenticated into the lab

Students are able to access any of the computers in the lab and complete their assignments without fear that there actions will affect computer systems outside the lab

November 12, 2004 Columbus State University 6

Security and Assurance of Information Lab (SAIL)

Hardware Configuration

VPN Concentrator

PCs

Hubs (not switches)

KVM switch

November 12, 2004 Columbus State University 7

Security and Assurance of Information Lab (SAIL)

November 12, 2004 Columbus State University 8

Security and Assurance of Information Lab (SAIL)

November 12, 2004 Columbus State University 9

Security and Assurance of Information Lab (SAIL)

Software Configuration VPN Concentrator Software

PCs running RealVNC (Virtual Network Computing)

http://www.realvnc.com/

Operating Systems

Security Software

November 12, 2004 Columbus State University 10

Security and Assurance of Information Lab (SAIL)

November 12, 2004 Columbus State University 11

Security and Assurance of Information Lab (SAIL)

November 12, 2004 Columbus State University 12

Security and Assurance of Information Lab (SAIL)

Data Confidentiality, Data Availability, Data Integrity, Data Encryption in a Windows Environment http://csc.colstate.edu/summers/NO

TES/6128/lab2.html Password Policy (and cracking)

http://csc.colstate.edu/summers/NOTES/6128/lab6.html

http://csc.colstate.edu/summers/NOTES/6128/lab6b.html

November 12, 2004 Columbus State University 13

Security and Assurance of Information Lab (SAIL)

Network Security - port scanner and security scanner (nmap & nessus) http://csc.colstate.edu/summers/NO

TES/6128/lab9.html Network Security - network

protocol analyzer (ethereal) http://csc.colstate.edu/summers/

NOTES/6128/lab10.html

November 12, 2004 Columbus State University 14

Security and Assurance of Information Lab (SAIL) - TODO

Install a Firewall in the lab Assignment on configuring a

firewall Assignment on use of a firewall

Install a router in the lab Assignment on configuring a router Assignments on router security

Duplicate assignments with Linux (compare and contrast)

Attack and Defend assignments Add more equipment modules

November 12, 2004 Columbus State University 15

Security and Assurance of Information Lab (SAIL)

THANKS Bob DuCharme and CISCO for the

training and insight

CPAK for providing equipment and initial setup

My students for putting up with the frustrations, especially Sharon Croke-Allsup & Carlos Martin who helped configure the SAIL

November 12, 2004 Columbus State University 16

Security and Assurance of Information Lab (SAIL)

Questions?