Hands-on Cybersecurity Studies: Automated Scan Tool Detection
Report Number:
ARL-SR-0485
Publish Date:
December 7, 2023
Distribution:
Approved for public release: distribution is unlimited.
Author(s):
Jaime C Acosta
Abstract:This special report describes a hands-on cybersecurity exercise that focuses on novel research aimed at automatically collecting data and generating intrusion detection system (IDS) rules using the Generate, Examine, Match (GEM) system. In the exercise, participants create a network scenario and learn how to collect and analyze the traffic generated by a network scanning tool. Afterward, they create an IDS rule by hand. The subsequent steps lead students through how to use the GEM tool and then they automatically create IDS rules.
File Size:
3 MB