A CyberCIEGE Scenario Illustrating PKI Interoperability Issues through E-mail Communications in a Corporate Environment

Abstract

To help educate computer/network users and administrators on the complexities and potential implementation pitfalls of PKI, the work outlined in this thesis extended the CyberCIEGE computer security simulation game with additional PKI-related functionality. The research developed a scenario definition file for the CyberCIEGE game engine that supports a new game scenario that illustrates PKI concepts (e.g., cross-certification, certificate path processing and certificate revocation), configuration choices, and the security implications thereof. The game engine was enhanced to realistically model the parameters of an actual X.509 digital certificate. Test cases designed for this game extension verified that the scenario reasonably portrayed realistic PKI deployment issues and provided feedback consistent with real-world PKI implementations.

Open PDF

Document Details

Document Type
Technical Report
Publication Date
Dec 01, 2011
Accession Number
ADA556638

Entities

People

  • Ng T. Teng

Organizations

  • Naval Postgraduate School

Tags

Communities of Interest

  • C4I
  • Cyber
  • Energy and Power Technologies
  • Engineered Resilient Systems

DTIC Thesaurus Topics

  • California
  • Commerce
  • Computer Access Control
  • Computer Network Security
  • Computer Science
  • Computers
  • Cybersecurity
  • Deployment
  • Electronic Mail
  • Governments
  • Information Security
  • Information Systems
  • Performance Tests
  • Security
  • Students
  • Web Browsers
  • Word Processors

Fields of Study

  • Computer science

Readers

  • Cybersecurity.
  • Database Systems and Applications
  • Game Theory.

Technology Areas

  • Cyber