Research on Developing a Lab Environment for Cookie Spoofing Attack and Defense Education

Abstract

Cookie spoofing is a common network attack. It's a must for web site administrators to protect their web sites from cookie spoofing attacks. In order to let the students in higher vocational colleges master the attack and defense skills of cookie spoofing, it's essential to let them have the opportunity to truly practice the attacking behaviors as hackers do, and to practice the defense countermeasures as web site administrators do. In this paper, we have developed a lab environment for cookie spoofing attack and defense education in higher vocational colleges. Our experience shows that higher vocational college students can better understand what cookie spoofing is, how hackers perform cookie spoofing attacks, why they can do so, and finally how to prevent cookie spoofing attacks. We suggest that a lot more researches need to be done in the area of developing attack and defense lab environments in order to improve the outcomes of network security education in higher vocational colleges. Results can be useful for similar education activities at other schools.