Automated computer forensics training in a virtualized environment

  • Authors:
  • Stephen Brueckner;David Guaspari;Frank Adelstein;Joseph Weeks

  • Affiliations:
  • ATC-NY, United States;ATC-NY, United States;ATC-NY, United States;Air Force Research Laboratory, United States

  • Venue:
  • Digital Investigation: The International Journal of Digital Forensics & Incident Response
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

The CYber DEfenSe Trainer (CYDEST) is a virtualized training platform for network defense and computer forensics. It uses virtual machines to provide tactical level exercises for personnel such as network administrators, first responders, and digital forensics investigators. CYDEST incorporates a number of features to reduce instructor workload and to improve training realism, including: (1) automated assessment of trainee performance, (2) automated attacks that respond dynamically to the student's actions, (3) a full fidelity training environment, (4) an unrestricted user interface incorporating real tools, and (5) continuous, remote accessibility via the Web.