Teaching Penetration Testing

We are devising lessons and tools for using in a class of information security students. Students are presented with realistic exercises (e.g., realistic scenarios and objectives) and they are evaluated by their performance. We have created a simulation tool, Core Insight, which has been integrated to a penetration testing learning kit in order to perform these exercises without requiring the underlying hardware and settings. We are designing scenarios of ascending difficulty which test the students' ability in different aspects (e.g., information gathering, attacking different topologies, evading tight firewalling).

Check our talk at Troopers '08 for starters.

Publications

• Simulating Cyber-Attacks for Fun and Profit 
  • Authors: Ariel Futoransky, Fernando Miranda, Jose Orlicki and Carlos Sarraute
  • In: 2nd International Conference on Simulation Tools and Techniques (SIMUTools'09)
  • Date published: 2009-03-02
• A Penetration Testing Learning Kit 
  • Authors: Ariel Waissbein
  • In: Troopers08. April 23-24, 2008. Munich, Germany. At http://www.troopers08.org/

Related information

Projects
A Penetration Testing Research Framework | Attack Planning | Attack Simulation