Security training - especially good, quality training - can be hard to come by without traveling somewhere and paying some hefty class fees. That's why my eyes opened wide when I found the Carnegie Mellon University/CERT Virtual Training Environment, which has a whole slew of great documents, tutorials and other resources that can enable anyone to learn a whole lot about computer, network and application security and forensics.

The Virtual Training Environment (VTE) is a Web-based knowledge library for Information Assurance, computer forensics and incident response, and other IT-related topics. VTE is produced by the Software Engineering Institute at Carnegie Mellon University.

What specifically is available? The VTE houses four types of training materials:

  • Documents: Whitepapers, handbooks, instruction guides, and other written material related to one or more IT topics such as information assurance, computer forensics, or incident response.

  • Demos: Demos are narrated recordings of instructor’s desktops. They enable users to watch and listen as an instructor describes the activities he or she is performing on a particular machine or piece of software.

  • Lectures/Modules: Modules are actual class instruction that has been video captured and transcribed. Modules are synchronized to a PowerPoint slideshow. Users can navigate through the module using the slide title or using VCR-like controls.

  • Labs: Labs are hands-on training exercises in IT-related topics using virtual machines. Each Lab has an accompanying walkthrough document and can be reserved and ‘taken’ using the browser.

All of the materials except the labs are available to the public, without having to sign up or anything. The hands-on labs are available only to organizations that have a relationship set up with CERT. There's not any obvious information on the site that indicates how to establish that relationship. but I did a Google search and found a brief announcement on the Carnegie Mellon University site indicating that emailing the VTE support email address (which is available on the VTE site link, below) is the way to find out more.

Access the CERT VTE at: http://vte.cert.org/