Collaborative Research: Developing and Assessing Educational Simulations to Enhance Cyber Security Learning in Computer Science Programs

网络安全教育对国家和个人安全越来越重要。学院和大学需要让学生为他们将遇到的计算机和网络安全挑战做好准备，未来的劳动力需要具备额外的网络安全技能，以最好地保护国家的利益。计算机模拟已经成功地应用于许多教育领域，以吸引学生并衡量他们的学习。虽然有许多模拟可以提高网络安全意识，但大多数模拟要么针对高中生，要么需要高水平的知识才能使用。因此，很难找到适合大学生学习高级安全主题的严肃模拟。然而，教育界需要这种类型的工具来帮助激励和吸引学生学习困难的安全概念。这种参与对于吸引和留住网络安全领域的学生尤为重要。这是温斯顿-塞勒姆州立大学和北卡罗来纳a&t州立大学的合作项目，这两所大学都是历史上的黑人大学，旨在开发三种教育计算机模拟，内置评估，有效地教授关键的网络安全概念。该项目将使两所参与大学的学生直接受益，使学生成为模拟的开发者和用户。该项目将有助于建立有效的网络安全教学知识库，使毕业生更好地为未来的劳动力做好准备。该项目的目标是：1)开发三个内置评估的教育模拟，以有效地教授涉及访问控制、网络漏洞和缓冲区溢出的网络安全概念。2)将模拟整合到两所大学现有的计算机科学课程中。3)制定和实施评估方法来衡量模拟的有效性。模拟将以不同的难度设计，针对从一年级到高年级的所有年级的本科生。模拟的有效性评估将使用准实验设计以及定量和定性数据来回答两个研究问题：1)在获得学习成果、高质量的学习者体验和影响学生态度和动机方面，模拟是否比讲座更有效？2)在获得学习成果、高质量的学习者体验和影响学生的态度和动机方面，模拟是否比其他体验式学习方法（如案例研究、实验室）更有效？模拟和研究结果将通过项目网站和其他在线场所公开，并将通过会议报告、期刊出版物和夏季教师研讨会传播给教师。该项目将加强北卡罗莱纳州A&amp；T州立大学网络防御中心，该中心是由国家安全局和国土安全部指定的信息保障教育学术卓越中心。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Cybersecurity education is increasingly critical to national and personal security. College and universities need to prepare students for the computer and network security challenges they will encounter, and the workforce of the future needs to have additional cybersecurity skills to best protect the interests of the nation. Computer simulations have been successfully used in many areas of education to engage students and measure their learning. Although many simulations are available to increase cybersecurity awareness, most either target high school students or require high levels of knowledge to use. As a result, it is hard to find serious simulations for college students that focus on advanced security topics. However, the education community needs this type of tool to help motivate and engage students in learning difficult security concepts. This engagement is especially important for attracting and retaining students to the field of cybersecurity. This collaborative project of Winston-Salem State University and North Carolina A&T State University, both historically black universities, aims to develop three educational computer simulations with built-in assessments that effectively teach key cybersecurity concepts. The project will directly benefit students at the two participating universities, by enabling the students to be both developers and users of the simulations. This project will contribute to the knowledge base of effective teaching in cybersecurity and better prepare graduates for the future workforce.The objectives of the project are to: 1) Develop three educational simulations with built-in assessments to effectively teach cybersecurity concepts involving access control, network vulnerabilities, and buffer overflow. 2) Integrate the simulations into the existing computer science curriculum at both universities. 3) Develop and implement assessment methods to measure the effectiveness of the simulations. The simulations will be designed with different levels of difficulty to target undergraduate students at all levels, from first-year students to seniors. Assessment of the simulations' effectiveness will use a quasi-experimental design together with both quantitative and qualitative data to answer two research questions: 1) Is the simulation more effective than a lecture for achieving learning outcomes, a quality learner experience, and influencing student attitudes and motivation? and 2) Is the simulation more effective than other experiential learning approaches (e.g., case study; lab) for achieving learning outcomes, a quality learner experience, and influencing student attitudes and motivation? The simulations and research findings will be publically available through the project website and other on-line venues, and will be disseminated to faculty via conference presentations, journal publications, and a summer faculty workshop. This project will strengthen the North Carolina A&T State University's Center for Cyber Defense, a Center of Academic Excellence in Information Assurance Education designated by the National Security Agency and the Department of Homeland Security.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.