Web-Based ITS for Training System Managers on the Computer Intrusion

Recently, unauthorized computer access has become becomes a big social problem. Of course, there are many commercial solutions for protecting systems against the intruder. But mostly we tend to rely on the system manager's field experience for maintaining the system. Therefore, the manager needs to keep up with the existing knowledge, along with any new threats. In the research described here, we have designed and implemented a simulated training environment to combat computer intrusions. The system begins with a menu outlining a curriculum focused on UNIX security, which is generated from the knowledge base dynamically. The selected topic (a goal) from the curriculum is then expanded into several missions (subgoals). The student can complete each mission by entering a sequence of UNIX commands that together provide an appropriate solution to the problem at hand. Since the system keeps track of the solution paths, the student's problem solving steps can easily be monitored and interrupted with appropriate hints, as needed. The tutor is designed as a client/server system, so the student needs only a web browser to access the system. Moreover, the student can manipulate the tasks in this virtual OS environment, according to the learning scenario.