Hit 'em where it hurts: a live security exercise on cyber situational awareness

Authors:
Adam Doupé;Manuel Egele;Benjamin Caillat;Gianluca Stringhini;Gorkem Yakin;Ali Zand;Ludovico Cavedon;Giovanni Vigna
Affiliations:
University of California, Santa Barbara;University of California, Santa Barbara;University of California, Santa Barbara;University of California, Santa Barbara;University of California, Santa Barbara;University of California, Santa Barbara;University of California, Santa Barbara;University of California, Santa Barbara
Venue:
Proceedings of the 27th Annual Computer Security Applications Conference
Year:
2011

Citing 5
Cited 1

Petri Nets

ACM Computing Surveys (CSUR)
Java Native Interface: Programmer's Guide and Reference

Java Native Interface: Programmer's Guide and Reference
Teaching network security through live exercises

Security education and critical infrastructures
How the Cyber Defense Exercise Shaped an Information-Assurance Curriculum

IEEE Security and Privacy
Organizing large scale hacking competitions

DIMVA'10 Proceedings of the 7th international conference on Detection of intrusions and malware, and vulnerability assessment

Mission-aware time-dependent cyber asset criticality and resilience

Proceedings of the Eighth Annual Cyber Security and Information Intelligence Research Workshop

Quantified Score

Hi-index	0.00

Visualization

Abstract

Live security exercises are a powerful educational tool to motivate students to excel and foster research and development of novel security solutions. Our insight is to design a live security exercise to provide interesting datasets in a specific area of security research. In this paper we validated this insight, and we present the design of a novel kind of live security competition centered on the concept of Cyber Situational Awareness. The competition was carried out in December 2010, and involved 72 teams (900 students) spread across 16 countries, making it the largest educational live security exercise ever performed. We present both the innovative design of this competition and the novel dataset we collected. In addition, we define Cyber Situational Awareness metrics to characterize the toxicity and effectiveness of the attacks performed by the participants with respect to the missions carried out by the targets of the attack.