Network Security Auditing as a Community-Based Learning Project

Security courses can focus on encryption/authentication algorithm design, attack/defend methodologies, or security techniques. Our goal is to train computer personnel in how to secure networks. What better way than to work with real equipment and real organizations? This course includes a community-based project which involves students auditing part of a system for local organizations. Auditing is common in industry, and requires students to be well-versed in security techniques, the auditing process, and the application of results. This paper outlines our experiences in bringing community-based audit projects into the classroom.