Collaborative Research: EAGER: Enhancing the Cyber Security Workforce - The Human Angle

拟议的研究在两个鲜有研究的领域提供了广泛的新数据。首先是网络竞争对加强网络安全队伍的整体影响。有广泛的轶事证据表明个人竞争的好处，但需要一项大规模的、精心构建的研究来确定结果和因果关系。此外，这是对对网络安全感兴趣的人的心理特征的首次彻底检查。相关研究考察了IT专业人员的人格特征、计算机“黑客”的认知风格，以及与STEM项目成功相关的学术能力。然而，目前还没有专门针对网络安全领域的研究。这些发现有望改变现有的关于有资格并愿意从事网络安全职业的人类型的想法。增加训练有素的网络安全专业人员的数量对于公共和私营企业的持续成功至关重要。竞赛，例如纽约大学-保利的数字“夺旗”挑战赛，代表着一种很有希望的方法，通过实践竞赛作为学习的刺激来实现这一目标。然而，为了提高应对未来挑战的效力，首先必须审查过去努力的影响。比赛提供了一个独特的机会，可以探索已经对网络安全表现出兴趣的个人的心理。研究这一群体可以洞察为什么某些合格的人追求网络安全职业，而另一些人则不是。这种洞察力还可以作为组织者未来努力的宝贵指南，这些努力旨在吸引更多有才华的人加入网络安全工作队伍。

The proposed study provides extensive new data in two scarcely examined research areas. The first is the overall impact that cyber competitions have on enhancing the cybersecurity workforce. There is widespread anecdotal evidence of the benefits of individual competitions, but a large-scale, carefully constructed study is needed to determine outcomes and causal relationships. Additionally, it is the first thorough examination of the psychological characteristics of people interested in cybersecurity. Related research has examined the personality traits of IT professionals, the cognitive styles of computer "hackers," and the academic abilities associated with success in STEM programs. However, no studies have focused exclusively on the cybersecurity field. The findings hold promise to transform existing ideas about the types of people who are qualified and willing to pursue careers in cybersecurity. Increasing the number of trained cybersecurity professionals is crucial to the continued success of both public and private enterprises. Competitions, such as NYU-Poly's digital "Capture the Flag" challenge, represent a promising approach towards accomplishing that goal using hands-on competition as a stimulus for learning. However, in order to improve the efficacy of future challenges, it is first necessary to examine the impact of past endeavors. Competitions present a unique opportunity to explore the psyche of individuals who have already displayed an interest in cybersecurity. Examining that population provides insight into the reasons why certain qualified individuals pursue careers in cybersecurity, while others do not. Such insight can also serve as an invaluable guide for the organizers of future efforts aimed at attracting a larger number of talented individuals to the cybersecurity workforce.