Using agent in virtual machine for interactive security training

With the lack of security awareness, people are easy to become malicious programs' target. Hence, it is important to educate people to know how the hackers intrude the systems. In this paper, we propose a platform that combining agent and virtualization technologies to build an interactive security training platform with which people can easily get security training. In our system, all malicious programs are contained in virtual machines, and by installing an agent in the virtual machine, our system can record trainee's operations to the malicious program, then decide what situation the trainee may face and what steps should follow up to accomplish attack or defense in hands-on labs according to the results of trainee's previous operations. This kind of interactivity as well as the individualized learning experience will decrease the disadvantage of "single size fit all" which is generally associated with traditional security training courses.