The Study of “Sensitive Data Exposure” Information Secutity Topic Training Base on Open Source Lab Tool

• Main Authors: LU, CHIH-HAO, 盧志豪
• Other Authors: LU, YI-BIN
• Format: Others
• Language: zh-TW
• Published: 2019
• Online Access: http://ndltd.ncl.edu.tw/handle/9bak34

碩士 === 國防大學 === 網路安全碩士班 === 107 === "Sensitive Data Exposure" is a serious issue. Today, many web applications and APIs on the market lack effective means to protect their own sensitive data. Such weakly protected data may be stolen or modified by an attacker, causing loss of money, reputation, and even life. The purpose of this study is to design technical materials related to the topic of "Sensitive Data Exposure", and plans to implement short-term training courses to enable trainees to understand the expertise and technology in this field. We integrates the CTFd platform and the OWASP Juice Shop as a learning and testing system, and divide the trainers into two groups to implement short-term training in two stages. Finally, the questionnaires and tests were used to compare and verify the differences between the two groups. The experimental results show that the design and implementation of this study have achieved good results.