[PEN-TEST] RES: [PEN-TEST] Educational laboratory setup

[Antonio Montes <montes () LAC INPE BR>]

Hi!

We have a course lab just like the one you're proposing. The students love
it :-) Since the lab runs for twelve weeks, we have split the students in
three groups and each group administer the lab's internal network for a
period of four weeks while the other two try to attack the network. The
last week of the period is dedicated to the elaboration of a report for
each group. The internal network has machines running Solaris, Linux and NT
and has to offer various services, such as ftp, telnet, http, smtp, pop,
etc. Students from the attacking groups have nonprivileged accounts in the
machines of the internal network. For the next course, we plan to have just
one attacking group, the other one will be in charge of the NIDS (Snort).
The students have found it too time consuming to administer the network and
monitor the NIDS (don't we all? :-).
Good luck.

Antonio
-----------------------------------------------
Dr. Antonio Montes
Network and Systems Security Group
National Institute for Space Research
S.J.Campos, SP - Brazil
Tel. 55 12 345-6538 Fax. 55 12 345-6375

----- Mensagem original -----
De:             Markus Peuhkuri [SMTP:puhuri () TCT HUT FI]
Enviada em:             Quinta-feira, 14 de Dezembro de 2000 12:26
Para:           PEN-TEST () SECURITYFOCUS COM
Assunto:                [PEN-TEST] Educational laboratory setup

We have a new course for next term about communication security issues
(undergraduate M.Sc.).  One part of the course is to do some
laboratory work on both attacking and protecting the network and
information stored there.

As there is not very much time allocated for these tasks, it should be
well prepared to be meaningful.

We are planning to have attacking hosts outside, a firewall, NIDS, a
router network and end system hosts with possible back doors and
trojans.  It is also possible that some groups have possibility to put
a sniffer on network.  There is also varying amount of information
available about what is happening and what is in network.

I'll like to know about similar courses, if you have any experiences
or insight.

--
Markus Peuhkuri        ! internet: Markus.Peuhkuri () hut fi
HUT/Telecomm. Tech.    ! http://www.iki.fi/puhuri/