Red-blue team exercises for cybersecurity training during a pandemic

摘要

The COVID-19 pandemic has given rise to a remote workforce and education system which is vulnerable to a number of unique cybersecurity risks. There is a need for training cybersecurity professionals to deal with cyber threats during the pandemic and its aftermath. We present a series of red-blue team exercises related to pandemic threats, developed for undergraduate cybersecurity students. Implementation and experimental verification of macro virus attacks leveraging social engineering, building command-and-control services and conscripting devices into a botnet, and mitigating man-in-the middle attacks using a Raspberry Pi for website filtering will be discussed.