Detalhamento técnico de ambiente virtual confinado para testes de segurança

Abstract

This paper discusses the importance of an isolated laboratory for prática classes in information security subjects, especially in situations where there is a real risk of purposefully or inadvertently attacking resources outside the laboratory. The need for methodologies, techniques and tools aimed at improving both the quality of teaching and the training of future professionals in the field of information technology. Concepts and the structuring of the computer base are presented, which are essential for understanding and building the laboratory model. The concepts of computer networks, digital security, malicious code and types of information security attacks are detailed, which are essential for the development of the proposed work. Some of the most common methods used in information security breaches, invasions, attacks and scams are presented, as well as the tools most commonly used in cybercrime, which, due to the way they are carried out, can be dangerous if done in an uncontained laboratory environment. Finally, the modeling, structuring and detailed specification of this work’s proposal is presented, covering the knowledge, methods, techniques and tools applicable to the proposed environment.