NetS-X - The network security experience

Abstract

This paper introduces the running prototype of a novel open source e-learning environment for network security education utilizing an interactive game approach. Network security is a difficult topic to teach due to the high turnover rate of practices and specific knowledge in this area. Combining a real physical network, an appealing user interface, and a competitive, fun atmosphere, NetS-X provides an explorative learning platform for a broad variety of security-related scenarios. The system architecture integrates highly heterogeneous components in a Linux environment. The network incorporates state-of-the-art security and network monitoring tools, services, and protocols of a typical company network. Players start out in a self-learning adventure game component before playing in the real network. Through solving quests posed by non-player-characters, they gain skills that will eventually be applicable in real-world scenarios. Players advance through multi-step scenarios of increasing difficulty levels, gaining confidence in using network security tools, recognizing vulnerabilities, and learning how to close security holes. The goal is to team up in virtual companies, and protect the own company assets from being compromised by other teams. Each scenario entails several acts of IT security warfare, e.g., the defacement of a webpage or the decryption of a password. All available game scenarios are fully integrated into the network, recreating the authenticity and excitement of working in a real-world company network.