Firewall Training Program Based On CyberCIEGE

摘要

Firewalls represent an essential tool in networking environments. They are commonly used as an intermediate system to protect an internal network from external networks. It can be destructive to an organization if its sensitive information falls into wrong hands or becomes corrupted. The vulnerability becomes greater if an organization actively uses the Internet. Firewalls play an important role as a first line of defense for the protection of sensitive information and personnel need to understand the proper use of firewall technology and the fundamentals of the packet filtering concepts. Through hands-on activities, trainees can experience different types of network attacks and can learn how firewalls can mitigate them. The goal of this project was to identify the potential capabilities of CyberCIEGE, a simulation created as an interactive educational tool, to help re-enforce packet filtering concepts through the use of computer gaming techniques. This thesis resulted in refinements to the CyberCIEGE packet filter component to more closely model real- world devices. Scenarios were developed to cover the concepts of packet filtering, filtering against IP spoofing threats and firewalls in demilitarized zone. These refinements and the thesis scenarios contributed to the educational objectives of the tool and benefit the Department of Defense.