An isolated, multi-platform network sandbox for teaching IT security system engineers

Abstract

The objective of this paper is to describe the successful deployment and operation of a student managed, isolated network "Sandbox" laboratory used for teaching Information Technology (IT) Security System Engineers. Laboratories for training Network Engineers have previously been deployed in IT education, frequently using a standard operating system base configuration in order to facilitate re-imaging for new classes. We have elected to employ a mujlti-platform environment that utilizes bothWindows and Linux operating systems. The Sandbox is called such because it is a creative experimental area physically isolated from all other networks including the Internet. Experimentation with every class of vulnerability such as viruses, worms, parasites, malware, and Denial of Service attacks is evaluated, mitigated and controlled. Having a strictly Linux-based environment as others frequently have done avoids the escalating problems introduced by Windows platforms. We have elected to study and experiment with multiple OS environments and confront the challenges that Windows presents. The Sandbox security laboratory has served as a test-bed for executing security labs created by students concurrent with the running of two different upper-class and graduate university-level IT security courses. Students created both the lectures and the labs used in these security courses. The first course was a very comprehensive course in all topics of network, internet and web security. The sescond course dealt with identity management, data privacy and identity theft. Students architected the network topology and built the Sandbox. The Sandbox is designed in a modular fashion to facilitate the creation of multiple network nodes with firewalls, IDSs, and associated servers, routers and switches. A student Security Team was organized to administer the Sandbox. Security Best Practices were developed to ensure consistent management of the Sandbox and its security policies. IT undergraduate and graduate students have learned that the role of a Security Systems Engineer involves not only technology, but also responsible management of policy and Best Practices concepts

The role of undergraduate laboratories in the formation of engineering identities: A critical review of the literature

“…5 The literature provided many examples of how pedagogies that facilitated experimental discovery and active engagement and were authentic enabled the emergence of diverse engineering identities. 45…”

“…9 As students gained greater proficiency in the application of specialised tools, they were better able to contribute to interdisciplinary teams, which strengthened their professional identities as they gained insights into engineers' contributions towards solving complex problems. 50 Several research studies suggested that generic engineering tools, 46 a 'makerspace' 50 or a 'student managed Sandbox,' 45 were effective in enabling an innovative engineering identity.…”

The agility, flexibility and efficiency of hypervisors in engineering education

“…For the past ten years, the authors have been implementing operating system virtualization in engineering laboratory exercises at both semester-based universities as well as NU [2][3][4][5][6][7][8]. Virtual Labs (VL), as these exercises have been called, have been especially important in the one-month-course modality.…”

A laboratory based capstone course in computer security for undergraduates

“…There are a number of different approaches one can take to the design of an isolated laboratory for security exercises; we mention [8,10,15,16,21,22,23].…”