Hacking for fun and Education: ELearning on Network Security

Abstract

In a world where security agencies recruit their security experts, a fundamental and affordable education is needed to address these high demands. Security experts need to understand the hacker view to be able to secure a network or an IT system. Therefore hacking skills are needed to protect the 24 / 7 availability of an IT system which is crucial for successful business in the connected world. Only reading about a security flaw can't cope with the feeling of exploiting it. Exploiting by oneself can enhance the ability to comprehend the full extend of a security flaw. The Network Security eXperience (NetS-X) eLearning environment is able to provide a fully controlled hacking environment, with on demand guidance and an optimized learning process. The hands on experience combined with the ongoing encouragement through instant feedback on request are delivering an interesting learning experience. NetS-X is setup on top of an existing enterprise like, sandbox network, to provide a suitable learning environment. Nothing is simulated or emulated. Therefore the experience of the practical learning module (scenario) is "the real deal. Special scenario deployment, controlled by the game engine is the key to the multiuser capability of NetS-X. This deployment is realized by the implementation of different setup types for environment and user. The user knows every fault is reversible with the click of a button, and therefore encouraged to play around as he likes, exploring the environment in his own way. Multiple choice tests before and after a scenario are introduced to help understanding & remembering even better. The game motivated eLearning environment helps the player to extend the knowledge on his own and is supported by the game engine counselling. The build in framework technologies maintainable through admin interfaces are allowing tutors as well as the learner himself to add content to the education process. Students of the University of Applied Sciences Bremen become capable of developing even more scenarios respectively learning modules to the game after passing it. Now NetS-X is deployed initially with 4 Levels and 31 scenarios from brute force and man in the middle attacks to SQL injections and buffer overflows.