DLP as an Integral Part of Network Security Intelligence Center

The paper presents the work-in-progress in developing since 2016 and using the "Network Security Intelligence" educational and research center (NSIC) in the framework of the NRNU MEPhI's Institute of Cyber Intelligence Systems (ICIS). The NSIC currently consists of two bearing laboratories with Next-Generation Firewall (NGFW) and Data Loss Prevention (DLP) system as their cores respectively. The DLP laboratory can be regarded as an integral NSIC's part, which expands students' knowledge and skills in protection against internal (insider) information security (IS) threats through creative research and discovery. For our NSIC the Russian SearchInform's Information Security Perimeter DLP system has been chosen. Five labs for students were developed on its basis. The main areas of further work in expanding NSIC's usage for training and research conclude the paper.

[1]  Natalia G. Miloslavskaya,et al.  "Network Security Intelligence" Educational and Research Center , 2017, World Conference on Information Security Education.

[2]  Richard Bejtlich,et al.  The Practice of Network Security Monitoring , 2013 .

[3]  Helen Armstrong,et al.  The virtual campus. a teaching mechanism for security units via the web , 2001 .

[4]  Ronald C. Dodge,et al.  Using Virtualization to Create and Deploy Computer Security Lab Exercises , 2008, SEC.

[5]  Chris Sanders,et al.  Applied Network Security Monitoring: Collection, Detection, and Analysis , 2013 .

[6]  Natalia G. Miloslavskaya.  Security Operations Centers for Information Security Incident Management , 2016, 2016 IEEE 4th International Conference on Future Internet of Things and Cloud (FiCloud).

[7]  Natalia Miloslavskaia,et al.  Network Security Scientific and Research Laboratory , 2003, World Conference on Information Security Education.

[8]  Natalia G. Miloslavskaya,et al.  Information Security Theory for the Future Internet , 2015, 2015 3rd International Conference on Future Internet of Things and Cloud.

[9]  Natalia Miloslavskaya,et al.  Practical studying of Wi-Fi network vulnerabilities , 2016, 2016 Third International Conference on Digital Information Processing, Data Mining, and Wireless Communications (DIPDMWC).

[10]  Dimitris Gritzalis,et al.  Action learning in practice: Pilot delivery of an INFOSEC University laboratory course , 2001 .

[11]  Gabriele Chiesura,et al.  Threat Intelligence Platforms , 2017 .

[12]  Eric Michael Hutchins,et al.  Intelligence-Driven Computer Network Defense Informed by Analysis of Adversary Campaigns and Intrusion Kill Chains , 2010 .

[13]  D. Richard Kuhn,et al.  Data Loss Prevention , 2010, IT Professional.