Improving Student Assessment of a Server Administration Course Promoting Flexibility and Competitiveness

Redondo, J. M.

doi:10.1109/te.2018.2816571

Cited by 14 publications

(9 citation statements)

References 18 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Otra línea de trabajo es estudiar qué formatos de informes adicionales pueden ser másútiles de cara a integrarlos con otras herramientas existentes. Por otro lado, se está contemplando la posibilidad de suministrar esta herramienta a los alumnos de asignaturas de seguridad y administración de servidores [39] del Grado de Ingeniería Informática [37] y del Máster en Ingeniería Web [40] de la Universidad de Oviedo, para que los alumnos sean conscientes de la importancia de las tareas de descubrimiento de información a la hora de analizar la seguridad de un equipo remoto. Además, también se está estudiando la posibilidad de usar la herramienta contra objetivos más grandes, como webs realistas que presentan vulnerabilidades de seguridad introducidas a propósito [41], también para facilitar el aprendizaje de técnicas de seguridad, o web reales en producción desarrolladas anteriormente por miembros de nuestro grupo de investigación [42], previa autorización de sus propietarios.…”

Section: Conclusionesunclassified

Towards Lightweight Mobile Pentesting Tools to Quickly Assess Machine Security Levels

Aller

López

Martinez

2019

IEEE Latin Am. Trans.

Self Cite

View full text Add to dashboard Cite

Section: Conclusionesunclassified

Towards Lightweight Mobile Pentesting Tools to Quickly Assess Machine Security Levels

Aller

López

Martinez

2019

IEEE Latin Am. Trans.

Self Cite

View full text Add to dashboard Cite

“…First users will be students from different courses of the School of Computer Engineering of the University of Oviedo [34]. The Computer Security (BsC of Software Engineering), the Web Security Systems, and Web Server Administration [35,36] (MsC and Doctorate in Web Engineering) courses are the first candidates. Next, courses of the infrastructure module of the future Master on Cybersecurity in Software Engineering (also from the same school) will also use them to perform infrastructure auditing tasks.…”

Section: Systematic Validationmentioning

confidence: 99%

Towards Improving Productivity in NMapSecurity Audits

Redondo

Cuesta

2019

JWE

Self Cite

View full text Add to dashboard Cite

Maintaining an adequate security level in computer infrastructures, like Internet-facing web servers, requires periodic assessment of their vulnerabilities with specialized security tools. nmap is arguably the most popular one, due to its versatility, powerful features, and low resource usage. However, this versatility can turn its usage difficult and error-prone, as it implements a lot of features and reports errors at runtime. This can lead to suboptimal results while designing auditing tasks. This research aims to decrease this complexity by developing a web GUI that favors experimentation, on-demand scans, and provides solutions to several shortcomings detected in the official one. We complemented it with a Domain Specific Language that implements early detection and reporting of syntax, type, and semantic errors when creating audit tasks. Both expand nmap possibilities, creating robust, schedulable, distributable, and portable auditing tasks able to find anomalies analyzing their output. Our initial release shows that the web GUI has been well received by several security related media and professionals. The language can detect and report a wide range of potential errors, substantially increasing the robustness of the created tasks. Therefore,

show abstract

“…This can be done by letting the students know in advance the description of the test cases they have to fulfill, their expected difficulty, their score, and how many different test cases are available. Introducing a certain degree of competition have been proven to be a successful tool to improve the assessment of security-related courses [39]. • They can be an objective and fast way of assigning scores to students.…”

Section: • Perform Web and Server Vulnerabilities Information Gatherimentioning

confidence: 99%

Filesync and Era Literaria: Realistic OpenSourceWebs To DevelopWeb Security Skills

López

Varela²

2018

JWE

View full text Add to dashboard Cite

A great variety of services and applications are currently offered using web sites. Unfortunately, this also caused the proliferation of attacks targeting their potential vulnerabilities. Therefore, the demand for security-trained professionals that identify, prevent and find solutions to security vulnerabilities is greatly increasing. This also increased the need for adequate training tools that show how real attacks are performed and prevented. In this paper we describe the design, implementation and usage examples of two websites designed to facilitate web security training. These websites have a realistic set of features and have been developed using different popular technologies. They deliberately incorporate examples of a large subset of common security vulnerabilities, complemented with learning and training materials. They are also open source to allow the development of customizations and adaptations to different scenarios and facilitate learning secure code development techniques.

show abstract

Improving Student Assessment of a Server Administration Course Promoting Flexibility and Competitiveness

Cited by 14 publications

References 18 publications

Towards Lightweight Mobile Pentesting Tools to Quickly Assess Machine Security Levels

Towards Lightweight Mobile Pentesting Tools to Quickly Assess Machine Security Levels

Towards Improving Productivity in NMapSecurity Audits

Filesync and Era Literaria: Realistic OpenSourceWebs To DevelopWeb Security Skills

Contact Info

Product

Resources

About