SEED:

Developing Instructional Laboratories for Computer SEcurity EDucation

Lab Environment

The SEED lab environment includes VMware, Minix, and Linux. This environment is used for all the projects in this course, and getting familiar with them is critical.
  • Virtual Machine Software:
    • Install VMware workstation. If you are a student at Syracuse University, you can get a serial number from the TA. This serial number is provided by VMware via its academic program. You can install the software on your personal computers (Windows, Linux, and Mac), but you need to comply with the license agreement described in http://www.vmware.com/academic.
    • If you don't have a VMware Workstation, you can use VMware Server, which is free.

  • Operating System: Install Ubuntu Linux (any recent version) as a guest operating system on VMware virtual machine. You can download this OS from the Internet. For the web-base labs (including Cross-Site Scripting, Cross-Site Request Forgery, SQL-Injection, and Web Browser Access Control Labs), we strongly recommend you to get a pre-built Ubuntu virtual machine image from us, because these labs need to set up web servers, databases, and web applications. The process is non-trivial. We have also installed all the necessary tools, software, and libraries in our pre-built VM image. You can get this VM image from one of the following URLs (if none of the URLs works, feel free to send an email to wedu@syr.edu, and we will set up a ftp server for you to download the VM image):

    Here is the user manual of our pre-built Ubuntu 9 Virutal Machine. It includes the account and password information, list of software and servers installed, and configuration.

  • For Minix-based labs: if your course needs to use a Minix-based lab, you need to install Minix 3 as a guest operating system on VMware virtual machine. You can go through the installation of Minix 3, or directly use a pre-built minix3 virtual machine. You can get both from the minix3 web site.
  • Netwox Tools Most of the network attack labs (including DNS attack, TCP/IP attack) need some special tools, so you can construct arbitrary packets. We have been using Netwox. Install the netwox tools. Here are the manuals of netwox, netwib, and netwag. Netwox is already installed in our pre-built Ubuntu VM image.

Installation Documents

The following documents are for older version of VMware (4.5); there might be differences in recent version of VMware. Therefore, they are put here only for reference purposes.

Reference Links