EDU: Enhancing and Broadening Computer Security Education with Stepwise and Reusable Problem-solving Challenges

EDU：通过逐步且可重复使用的解决问题的挑战来加强和扩大计算机安全教育

• 批准号: 1318881
• 负责人: Kang Li
• 金额: $ 29.89万
• 依托单位: University of Georgia Research Foundation Inc
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2013
• 资助国家: 美国
• 起止时间: 2013-09-15 至 2016-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1318881&HistoricalAwards=false
• 关键词: EDU; Enhancing; Broadening; Computer; Security

This project explores methods for enhancing computer security education through the use of practical problem-solving challenges. The investigators are building step-wise and parametrized reusable security challenges that mimic real-world scenarios involving computer attacks and defense strategies. To this end, the project borrows ideas and practices from successful experiences in building computer security competitions such as capture-the-flag, and provides instructors with a reusable platform for designing and managing competition-style challenges for the purpose of computer security and information assurance education. The investigators are also developing new educational material related to computer security that can be more easily integrated into relevant non-security computer science courses. The main goal is to broaden computer security education by developing a "cross-cutting" teaching approach, whereby fundamental computer security concepts are taught in most core computer science courses, from lower-level undergraduate courses, to upper-level undergraduate, to core graduate courses. Moreover, this project creates an opportunity to further adapt the newly developed education material to a larger audience, offering introductory information security education to IT professionals and increasing awareness regarding information security problems in general.

本计划探讨如何透过实际问题解决的挑战，加强电脑保安教育。调查人员正在构建逐步和参数化可重用的安全挑战，模拟涉及计算机攻击和防御策略的真实场景。为此，计划借鉴举办夺旗等电脑保安比赛的成功经验，为教师提供一个可重复使用的平台，设计和管理竞赛式的挑战，以进行电脑保安及资讯保障教育。调查人员还在开发与计算机安全相关的新的教育材料，这些材料可以更容易地集成到相关的非安全计算机科学课程中。主要目标是通过发展一种“交叉”的教学方法来扩大计算机安全教育，即在大多数核心计算机科学课程中教授基本的计算机安全概念，从低级别的本科课程到高级的本科课程，再到核心的研究生课程。此外，这个项目创造了一个机会，使新开发的教育材料进一步适应更多的受众，为IT专业人员提供介绍性的信息安全教育，并提高对一般信息安全问题的认识。