Accession Number:

ADA551975

Title:

Simulation of PKI-Enabled Communication for Identity Management Using CyberCIEGE

Descriptive Note:

Conference paper

Corporate Author:

NAVAL POSTGRADUATE SCHOOL MONTEREY CA CENTER FOR INFORMATION SYSTEMS SECURITY STUDIES AND RESEARCH

Personal Author(s):

Report Date:

2010-11-01

Pagination or Media Count:

8.0

Abstract:

CyberCIEGE is a sophisticated network security simulation packaged as a video game and used by educators around the world to enhance information assurance education and training at universities, community colleges, within the DoD and in other government agencies. The CyberCIEGE game engine was recently expanded to include Public Key Infrastructure PKI features including certification authorities selection of installed roots and cross certification. CyberCIEGE Virtual Private Network VPN gateways, VPN clients and email clients were then extended to incorporate the new PKI features. CyberCIEGE PKI abstractions are described in terms of player configuration choices and the consequences of these choices on network management and vulnerabilities. The CyberCIEGE game engine modifications include modeling of chains of trust and risks of cross certification schemes. The benefits of these enhancements include coherent integration of identity management technologies, ranging from the human interface through to the supporting distributed infrastructure, into scenarios. Benefits also include support for recent new scenarios focused on the PKI infrastructure, identity management, or both and the ability to tie both identity management and PKI to concepts of identification, authentication, provenance, and access control.

Subject Categories:

  • Computer Programming and Software
  • Computer Systems Management and Standards

Distribution Statement:

APPROVED FOR PUBLIC RELEASE