Security Awareness Training Simulation
August 2001
Michael C. Tanner, The MITRE Corporation
Christopher Elsaesser, The MITRE Corporation
Gregory M. Whittaker, The MITRE Corporation
ABSTRACT
This paper describes how simulation can be used to train systems administrators and managers about computer security threats. The advantage of simulation-based training over commercial seminar and lab oriented classes is that a simulation can be customized to resemble the enclave the student is interested in securing. Customization makes the training more relevant to the student and, by factoring out irrelevant topics, allows the student time to explore the effects of relevant hacker attacks in more depth than is possible in typical classes. A proof-of-concept prototype is described, along with the remaining development necessary to accomplish all the training objectives.
Additional Search Keywords
n/a
|
