Virtualized learning environment for network security using infrastructure as code practices

Abstract

In recent years the need for practical, hands-on cybersecurity training has significantly grown, due to the constant evolution and sophistication of threats and attack vectors in the digital landscape. This means that traditional classroom learning and theoretical approaches on their own are not sufficient enough to equip students with the necessary skills to recognizing, mitigating and responding to modern cybersecurity threats. Simulated laboratory environments that resemble real-world networks and systems are essential in closing the gap between theory and practice.

The goal of this thesis was to implement and evaluate the feasibility of using Infrastructure-as-Code and declarative programming practices to create easily deployable, reproducible, local laboratory environments. The platform was created for teaching network security topics as part of the Cloud- and Network Security course. By leveraging Infrastructure-as-Code tools for provisioning, the laboratory environments can be quickly and consistently deployed, minimizing the amount of manual setup in creating the systems and networks. Overall the implementation and configuration automation was successful, however there is space for future development, particularly about the tool choices discussed later in the thesis.