The United States Defense Information Systems Agency (DISA) puts out quite a bit of reasonable information. Some of it is even entertaining!

In particular, I am referring to an unclassified project called Cyber Protect. Cyber Protect is a flash-based network security simulation game in which you take the seat of a cyber security architect and you have to work within a budget to purchase components to defend your network against evil hackers.

While there is a lot of talk about the fact that perimeters are fading, clouds are great (and secure?), and we need to enable ubiquitous computing, the simulation is based on the more traditional network security concept of defense in-depth.

Players get to chose from a wide range of tools to purchase and implement, ranging from firewalls, intrusion detection, access control, antivirus, and encryption products to end-user training, backup and system redundancy.

The game is amusing to play, and it does a decent job of making the point that "stuff" needs to be maintained after it is purchased.

It took me two tries to make it to a 100% score. If you have 20 minutes to kill, check out the product. You can find it at http://iase.disa.mil/eta/cyber-protect/launchpage.htm