Collaborative Research: EAGER: Enhancing the Cyber Security Workforce - The Human Angle

拟议的研究在两个几乎没有审查的研究领域提供了广泛的新数据。首先是网络竞争对增强网络安全劳动力的整体影响。有广泛的轶事证据表明，个人竞争的好处，但需要一个大规模的，精心构建的研究，以确定结果和因果关系。此外，这是第一次对网络安全感兴趣的人的心理特征进行彻底检查。相关研究调查了IT专业人士的个性特征、计算机“黑客”的认知风格以及与STEM项目成功相关的学术能力。然而，没有任何研究专门关注网络安全领域。这些发现有望改变现有的关于有资格并愿意从事网络安全职业的人类型的想法。增加训练有素的网络安全专业人员的数量对于公共和私营企业的持续成功至关重要。竞赛，如纽约大学-保利的数字“夺旗”挑战，代表了一种很有前途的方法来实现这一目标，使用动手竞争作为学习的刺激。然而，为了提高未来挑战的效力，首先有必要审查过去努力的影响。竞赛提供了一个独特的机会，可以探索那些已经对网络安全感兴趣的人的心理。研究这些人群可以深入了解为什么某些合格的人从事网络安全职业，而其他人则没有。这种洞察力也可以作为组织者的宝贵指南，旨在吸引更多有才华的个人加入网络安全工作队伍。

The proposed study provides extensive new data in two scarcely examined research areas. The first is the overall impact that cyber competitions have on enhancing the cybersecurity workforce. There is widespread anecdotal evidence of the benefits of individual competitions, but a large-scale, carefully constructed study is needed to determine outcomes and causal relationships. Additionally, it is the first thorough examination of the psychological characteristics of people interested in cybersecurity. Related research has examined the personality traits of IT professionals, the cognitive styles of computer "hackers," and the academic abilities associated with success in STEM programs. However, no studies have focused exclusively on the cybersecurity field. The findings hold promise to transform existing ideas about the types of people who are qualified and willing to pursue careers in cybersecurity. Increasing the number of trained cybersecurity professionals is crucial to the continued success of both public and private enterprises. Competitions, such as NYU-Poly's digital "Capture the Flag" challenge, represent a promising approach towards accomplishing that goal using hands-on competition as a stimulus for learning. However, in order to improve the efficacy of future challenges, it is first necessary to examine the impact of past endeavors. Competitions present a unique opportunity to explore the psyche of individuals who have already displayed an interest in cybersecurity. Examining that population provides insight into the reasons why certain qualified individuals pursue careers in cybersecurity, while others do not. Such insight can also serve as an invaluable guide for the organizers of future efforts aimed at attracting a larger number of talented individuals to the cybersecurity workforce.