Developing Hands-on Labware for Emerging Database Security
Lei Li, Kai Guo Qian, Qian Chen, Ragib Hasan, Guifeng Shao · 2016
Database systems are at the heart of modern information systems and have become primary targets of cyber-attacks. With the advent of mobile and big data computing, new database models and systems, such as mobile and NoSQL databases, have been emerging and gaining popularity. These new database systems contain similar crucial vulnerabilities as traditional database systems' along with new and unique security challenges. However, neither mobile and NoSQL database system security education is well-represented in current computing curriculum or educational materials are readily available. This paper presents our ongoing work on developing a set of innovative Role Based Security Labware for Emerging Database Systems (REALAB) for teaching real-world mobile and NoSQL database security threat analysis and defense. We first review the security challenges in these databases and then we discuss and evaluate existing hands-on exercises of cyber security education. After that we present a list of proposed mobile and NoSQL database security hands-on labs and use a SQLite Injection lab as an example to illustrate the design of the proposed labs offered by REALAB. Student survey results validate the importance and feasibility of REALAB for enhancing current database cyber security education and increasing qualified database security workforce