I?ve been at SIGCSE this week and trying to soak up as much new things as I can. Today I ran into a couple of resources for teaching security in different ways. I?m still looking at them but at first look they appear to be potentially very useful.
Elevation of Privilege (EoP) Card Game 
Elevation of Privilege is the easy way to get started with threat modeling, a core component of the design phase in the Microsoft Security Development Lifecycle (SDL).
The Elevation of Privilege (EoP) card game helps clarify the details of threat modeling and examines possible threats to software and computer systems.
The EoP game focuses on the following threats:
- Spoofing
- Tampering
- Repudiation
- Information Disclosure
- Denial of Service
- Elevation of Privilege
CyberCIEGE
CyberCIEGE enhances information assurance and cyber security education and training through the use of computer gaming techniques such as those employed in SimCity?. In the CyberCIEGE virtual world, users spend virtual money to operate and defend their networks, and can watch the consequences of their choices, while under attack.
CyberCIEGE is available at no cost to agencies of the US Government by contacting cyberciege@nps.edu. Educational licenses are available at not cost to educational institutions by contactingcyberciege@nps.edu. If you are student, ask your teacher to request the game. A free evaluation version of CyberCIEGE is available here. The evaluation version has limited capabilities, e.g., you cannot save games.
You can customize and create your own scenarios using the Scenario Development Kit.
Land Software Lam Research L1 Identity Solutions Kingston Technology Company
No comments:
Post a Comment