Construção de um jogo de segurança voltado para alunos do MSI
Silva, José Luís Lopes
MSc Thesis · 2021 · University of Coimbra
Supervisors: Paulo Alexandre Ferreira Simões, Tiago José dos Santos Martins da Cruz
Abstract
Globally, in the last decade universities are increasingly committed to offering courses and programs in computer security, due to the high demand for specialists in the current market. However, establishing efficient and effective courses in Cybersecurity Education is a huge challenge. The new computer security courses end up addressing several areas, sometimes in an introductory way, either due to time limitations or inherent complexity. Therefore, several universities actively invest in teaching processes, with systematic and significant improvements in computer security courses, with practical activities, certifications, professional internships and Cybersecurity Training activities.In 2017, the University of Coimbra initiated, for the first time, the Master in Computer Security (MSI), which introduced security concepts applied to the areas of software, cryptography, networks and computer infrastructure. The present project arises when considering the possibility of improving this course, with a strong practical component. Using the Active Learning methodology with the Gamification concept, we aim to involve students and teachers from different areas of research, in learning computer security, through of Cybersecurity Training activities.Thus, this project presents as a solution, a training platform in computer security skills, on the theme of Capture the Flag (CTF) competitions. This solution aims to provide security exercises in an iterative environment (cyber range), based on real case studies, so that students can develop their offensive and defensive skills.However, the necessary skills and substantial time required to create and maintain a CTF platform is a big barrier. This project outlines the necessary measures to solve this problem, proposing a platform that incorporates automation and virtualization mechanisms. On the one hand, simplifying the management of CTF exercises, and on the other hand, enabling practical and motivating learning for future MSI course students.