EDU: Enhancing and Broadening Computer Security Education with Stepwise and Reusable Problem-solving Challenges

EDU：通过逐步且可重复使用的解决问题的挑战来加强和扩大计算机安全教育

• 批准号: 1318881
• 负责人: Kang Li
• 金额: $ 29.89万
• 依托单位: University of Georgia Research Foundation Inc
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2013
• 资助国家: 美国
• 起止时间: 2013-09-15 至 2016-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1318881&HistoricalAwards=false
• 关键词: EDU; Enhancing; Broadening; Computer; Security

This project explores methods for enhancing computer security education through the use of practical problem-solving challenges. The investigators are building step-wise and parametrized reusable security challenges that mimic real-world scenarios involving computer attacks and defense strategies. To this end, the project borrows ideas and practices from successful experiences in building computer security competitions such as capture-the-flag, and provides instructors with a reusable platform for designing and managing competition-style challenges for the purpose of computer security and information assurance education. The investigators are also developing new educational material related to computer security that can be more easily integrated into relevant non-security computer science courses. The main goal is to broaden computer security education by developing a "cross-cutting" teaching approach, whereby fundamental computer security concepts are taught in most core computer science courses, from lower-level undergraduate courses, to upper-level undergraduate, to core graduate courses. Moreover, this project creates an opportunity to further adapt the newly developed education material to a larger audience, offering introductory information security education to IT professionals and increasing awareness regarding information security problems in general.

该项目探索通过利用实际问题解决挑战来加强计算机安全教育的方法。 研究人员正在构建逐步的、参数化的可重复使用的安全挑战，模拟涉及计算机攻击和防御策略的现实场景。为此，该项目借鉴了夺旗等计算机安全竞赛的成功经验，为教师提供了一个可重复使用的设计和管理竞赛式挑战的平台，以实现计算机安全和信息保障教育的目的。研究人员还在开发与计算机安全相关的新教育材料，这些材料可以更容易地集成到相关的非安全计算机科学课程中。主要目标是通过开发“跨领域”教学方法来拓宽计算机安全教育，在大多数核心计算机科学课程中教授基本计算机安全概念，从低级本科课程到高年级本科课程，再到核心研究生课程。此外，该项目还创造了一个机会，使新开发的教育材料进一步适应更多受众，为 IT 专业人员提供信息安全入门教育，并提高人们对信息安全问题的总体认识。