[Ilugc] e-security laboratory
- From: suraj@xxxxxxxxxxxxx (Suraj Kumar)
- Date: Tue, 12 Mar 2013 19:07:45 +0530
[Replying on the list (with you included) because this may actually be of
use to others on the list]
On Mon, Mar 11, 2013 at 10:17 AM, Prof. Partha <drpartha at gmail.com> wrote:
As part of my responsibilities at Kathmandu Univ, where I teach
cryptography and security, I plan to set up a lab for security related
experiments. It will consist of a LAN with a https server connected to
the web. People can try different kinds of attacks and coutermeasures
etc, in a controlled, "real-time" environment. Do you know anyone who
has set up something similar ? Can you connect me to that person ? I
would also like to visit Chennai sometime, and see some institutions
which do such kinds of things. Can you suggest some institutions (and
contact person) ? Any other suggestions in this matter will also be most
welcome. Tell me which period is best for all this.
Orthogonal to your request, I'd suggest leveraging Amazon's "VPC" and
Amazon's EC2 to achieve this: Since all these services are highly
configurable APIs you will be able to create restricted multi-node networks
and be able to open it up for potentially the entire world to play with.
Since AWS has the notion of a "machine image" you can have pre-configured
vulnerable (or secure, as is the use-case) vulnerable machine images that
get booted up on demand for as many people as you want. Amazon also
provides many other controls that may not be possible in real world
computers - such as being able to restrict uptime or restricting whether
the state of a machine must be saved or not, etc.,.
Above all, since you are doing it for an educational purpose, it will be
possible for you (with some "rewording" of your intent) to leverage
Amazon's Education grant to fund the needed resources. You can get your
students to develop this system itself and in the process also give your
students a much sought after skill. Even if the grant is not possible, AWS'
"Spot instances" is a unique concept that bodes very well during Indian
timezone and especially for this "use and throw" stateless machines
use-case -- you can get fully functioning internet servers for as little as
(as of yesterday's AWS market pricing) $0.005 per hour (25 paisa / hour? :)
).
Regards,
-Suraj
--
Career Gear - Industry Driven Talent Factory - Amazon Web Services
Training Partner and Consultancy Firm
http://careergear.in/
Other related posts:
