Koji OKAMURA Cybersecurity Center, Kyushu University Advanced Cybersecurity Education Course Program using Cyber Range

Today’s Talk Report of Cybersecurity Primary Course to Fresh Students Introduction Cybersecurity Course with Cyber Range

Cybersecurity Primary Course 2014 Autumn, 2015 Spring and Autumn Fresh Students for every undergraduate school –Optional Course (not “All” now) 100 Students (from 2,600) –Art Engineering, Economics, Law, Letters, Medical, Medicine, Science, Engineering, Education, Agriculture –Dental Science Contents (14+1) –Introduction (1) –Case Studies (3) –Technical Issues (3) –Laws (3) –Privacy and Morals (1) –Social Science (1) –Copyright (2) –Examination (1)

Further Issues for Mandatory Course Big students 2,600 = 200 x 13 –2017 Spring Evaluation (GPA) –Paper based Examination Difficult for unified evaluation and it takes much time! –E-Learning based Examination Choice one correct answer from 3 or 4 candidates Selection of Contents –National Cybersecurity Workforce Framework from NICE (National Initiative for Cybersecurity Education) –Too much … Semester(15) -> Quarter(8)

Cyber Range Campus Network Internet Each student study by him/her self. Paired students study together. Beginner Course Advanced Course

Beginner Course Application base –Buffer Overflow –Weak Password –Weak Authentication –… Cryptography Forensics Network –Port Scan –DOS Attacks Web base –Cross-Site Scripting –Cookie Manipulation

Advances Course Application base Cryptography Forensics –Wireless Traffic Dump – Malware Analysis Network –Cookie Hijacking Web base –SQL Injection

Issues and Future Plan for Cyber Range Course Actual Course may start 2016 Autumn Issues –When and How knowledge base education will be done. –Difference to the real-world –To whom? Plan –Original Scenario using latest incidents APT –Co-use the machine