Dataset: Toolset for Collecting Shell Commands and Its Application in Hands-on Cybersecurity Training

<p>This repository contains supplementary materials for the following conference paper:</p> <p>Valdemar &Scaron;v&aacute;bensk&yacute;, Jan Vykopal, Daniel Tovarň&aacute;k,&nbsp;Pavel Čeleda.<br> <em>Toolset for Collecting Shell Commands and Its Application in Hands-on Cybersecurity Training.</em><br> In Proceedings of the 51st IEEE Frontiers in Education Conference (FIE&nbsp;2021).<br> <a href="https://doi.org/10.1109/FIE49875.2021.9637052">https://doi.org/10.1109/FIE49875.2021.9637052</a></p> <p>Preprint available at:&nbsp;<a href="https://arxiv.org/abs/2112.11118">https://arxiv.org/abs/2112.11118</a></p> <ol> </ol> <p><strong>How to cite</strong></p> <p>If you use or build upon the materials,&nbsp;please use the BibTeX entry below to cite the original paper (not only this web link).</p> <p>Some of the linked repositories have their separate citation entry; please use that one as well, if possible.</p> <pre><code>@inproceedings{Svabensky2021toolset, author = {\v{S}v\'{a}bensk\'{y}, Valdemar and Vykopal, Jan and Tovar\v{n}\'{a}k, Daniel and \v{C}eleda, Pavel}, title = {{Toolset for Collecting Shell Commands and Its Application in Hands-on Cybersecurity Training}}, booktitle = {Proceedings of the 51st IEEE Frontiers in Education Conference}, series = {FIE '21}, location = {Lincoln, NE, USA}, publisher = {IEEE}, address = {New York, NY, USA}, month = {10}, year = {2021}, pages = {1--9}, numpages = {9}, isbn = {978-1-6654-3851-3}, url = {https://doi.org/10.1109/FIE49875.2021.9637052}, doi = {10.1109/FIE49875.2021.9637052}, }</code></pre> <p><strong>Structure of the repository</strong></p> <p>We share four types of content described below. Each of the four types of materials includes:</p> <ul> <li>a link to an up-to-date GitLab repository, which may contain possible future revisions and error corrections, and</li> <li>a ZIP archive here on Zenodo that serves as a snapshot of the state when the article was published.</li> </ul> <p><strong>Attached content</strong></p> <ol> <li><strong>Logging toolset.</strong> It is implemented in the form of <a href="https://www.ansible.com/">Ansible</a> roles and consists of three separate projects: for <a href="https://gitlab.ics.muni.cz/muni-kypo/ansible-roles/sandbox-logging-bash">Bash logging</a>, <a href="https://gitlab.ics.muni.cz/muni-kypo/ansible-roles/sandbox-logging-msf">Metasploit logging</a>, and <a href="https://gitlab.ics.muni.cz/muni-kypo/ansible-roles/sandbox-logging-forward">log forwarding within the sandbox</a>.</li> <li><strong>Sample training.</strong> To quickly test the toolset, instantiate the exemplary cybersecurity game called <a href="https://gitlab.ics.muni.cz/muni-kypo-trainings/games/junior-hacker">Junior hacker training</a>. It already deploys the logging; no further setup is needed.</li> <li><strong>Dataset.</strong> The data collected with the toolset are available at <a href="https://gitlab.ics.muni.cz/muni-kypo-trainings/datasets/commands">this repository</a>, which is being gradually updated with new data. Attached is a subset of this repository that includes the data analyzed in the paper.</li> <li><strong>Analytical tools.</strong> To analyze the data, you can either use the attached Python scripts, or instantiate <a href="https://gitlab.ics.muni.cz/muni-kypo/tools/commands-elk">this project for ELK</a>.</li> </ol>