Creating a Virtual Laboratory to Teach Information Assurance Courses Online

1. Creating a Virtual Laboratory to Teach Information Assurance Courses Online Dr. Wayne Summers & Dr. Bhagyavati Columbus State University Columbus, Georgia

2. Challenge • How to provide students with hands-on activities teaching computer and network security courses… • …in a distance learning environment Columbus State University

3. Typical Solution • Students use their own computers • Assignments are limited by the students’ resources • Students typically have access to only one computer and one operating system • Unwise to allow students to use their personal computers to experiment with security software Columbus State University

4. Traditional Environment • Use an isolated computer lab • Students experiment with security software without worry that their experiment may impact computer systems outside the isolated lab • In an isolated lab, students can evaluate security of different operating systems, attempt to compromise the security of computer systems, and install additional security mechanisms without concern that there actions may affect computers outside the lab Columbus State University

5. Security and Assurance of Information Lab (SAIL) • Virtual security lab • Lab is accessible by any student who has Internet access whether they are on-campus, out-of-state, or even out of the country • Students are authenticated into the lab • Students are able to access any of the computers in the lab and complete their assignments without fear that there actions will affect computer systems outside the lab Columbus State University

6. Security and Assurance of Information Lab (SAIL) • Hardware Configuration • VPN Concentrator • PCs • Hubs (not switches) • KVM switch Columbus State University

7. Security and Assurance of Information Lab (SAIL) Columbus State University

8. Security and Assurance of Information Lab (SAIL) Columbus State University

9. Security and Assurance of Information Lab (SAIL) • Software Configuration • VPN Concentrator Software • PCs running RealVNC (Virtual Network Computing) • http://www.realvnc.com/ • Operating Systems • Security Software Columbus State University

10. Security and Assurance of Information Lab (SAIL) Columbus State University

11. Security and Assurance of Information Lab (SAIL) Columbus State University

12. Security and Assurance of Information Lab (SAIL) • Data Confidentiality, Data Availability, Data Integrity, Data Encryption in a Windows Environment • http://csc.colstate.edu/summers/NOTES/6128/lab2.html • Password Policy (and cracking) • http://csc.colstate.edu/summers/NOTES/6128/lab6.html • http://csc.colstate.edu/summers/NOTES/6128/lab6b.html Columbus State University

13. Security and Assurance of Information Lab (SAIL) • Network Security - port scanner and security scanner (nmap & nessus) • http://csc.colstate.edu/summers/NOTES/6128/lab9.html • Network Security - network protocol analyzer (ethereal) • http://csc.colstate.edu/summers/NOTES/6128/lab10.html Columbus State University

14. Security and Assurance of Information Lab (SAIL) - TODO • Install a Firewall in the lab • Assignment on configuring a firewall • Assignment on use of a firewall • Install a router in the lab • Assignment on configuring a router • Assignments on router security • Duplicate assignments with Linux (compare and contrast) • Attack and Defend assignments • Add more equipment modules Columbus State University

15. Security and Assurance of Information Lab (SAIL) • THANKS • Bob DuCharme and CISCO for the training and insight • CPAK for providing equipment and initial setup • My students for putting up with the frustrations, especially Sharon Croke-Allsup & Carlos Martin who helped configure the SAIL Columbus State University

16. Security and Assurance of Information Lab (SAIL) Questions? Columbus State University