A secure unrestricted advanced systems laboratory

Abstract

We present the design of a systems laboratory intended for advanced undergraduates and graduate students. The laboratory provides an environment in which students are given complete (root) control of systems with essentially unrestricted access to the Internet. This is achieved without jeopardizing the security of the departmental network of which the laboratory is a part. Students in the laboratory are also given a secure environment in which to do their work. Such a laboratory is most valuable in advanced courses in operating systems and networks in which students implement and evaluate algorithms and policies subjected to real workloads. It is also valuable as a facility for research on systems and network topics, providing an open, yet safe, environment in which to work.

References

1. 1 Matt Blaze. A cryptographic file system for UNIX. In Victoria Ashby, editor, 1st A CM Conference on Computer and Communications Security, pages 9- 16, Fairfax, Virginia, November 1993. ACM Press.
2. 2 Brian Dewey. Kernel-level implementation of an encrypting file system. Honors Thesis, The College of William & Mary, Computer Science, Williamsburg, VA, 1996.
3. 3 Carl Erickson. The EOS laboratory environment for a course in operating systems. In Karl J. Klee, editor, Proceedings of the 27th SIGCSE Technical Symposium on Computer Science Education, pages 353-357, New York, Februaryl5-18 1996. ACM Press.
4. 4 William Gropp, Ewing Lusk, Nathan Doss, and Anthony Skjellum. High-performance, portable implementation of the MPI Message Passing Interface Standard. Parallel Computing, 22(6):789-828, September 1996.
5. 5 J. Kaplenk. Using linux to teach unix system administration. The Linux Journal, (44), December 1997.
6. 6 Paul Letta. Ipv6 in the systems lab. CSCI780 Project Report, The College of William & Mary, Computer Science, Williamsburg, VA, 1998.
7. 7 Paul Pruitt. An asynchronous checkpoint and rollback facility for distributed computations. Honors Thesis, The College of William & Mary, Computer Science, Williamsburg, VA, 1998.
8. 8 Tin Siladin. Improving file system performance for lookups in large directories. MS Project Report, The College of William & Mary, Computer Science, Williamsburg, VA, 1997.
9. 9 Frank Wang. Snooping on tcp/ip streams. MS Project Report, The College of William & Mary, Computer Science, Williamsburg, VA, 1997.
10. 10 Tatu Ylonen. Ssh - secure login connections over the internet. In 6th USENIX Security Symposium, pages 37-42. USENIX Association, 1996.

Index Terms

• Applied computing

  • Education