SaTC: EDU: Collaborative: INteractive VIsualization and PracTice basEd Cybersecurity Curriculum and Training (InviteCyber) Framework for Developing Next-gen Cyber-Aware Workforce

SATC：EDU：协作：基于交互式可视化和实践的网络安全课程和培训 (InviteCyber​​) 开发下一代网络意识劳动力的框架

• 批准号: 1903423
• 负责人: Xiaoli Yang
• 金额: $ 23.14万
• 依托单位: Purdue University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2019
• 资助国家: 美国
• 起止时间: 2019-08-01 至 2022-11-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1903423&HistoricalAwards=false
• 关键词: SaTC; EDU; Collaborative; INteractive; VIsualization

Technology use among teenagers has greatly increased without a concomitant increase cybersecurity skills in this population. Several factors, including lack of standard high school cybersecurity curricula, and lack of cybersecurity awareness among teens, have contributed to teenagers becoming targets of cybercrimes such as cyberbullying. This research aims to leverage the increased technology use of teens to (a) develop a security mindset at the high school level, (b) spread awareness of the risks and threats associated with use of smartphone/tablets and other tech, and (c) inculcate interest in cybersecurity careers (with a long-term goal of addressing the national shortage of cybersecurity workforce). The project seeks to achieve these goals by providing cybersecurity training through interactive, animated visualizations so that students develop an interest in cybersecurity careers. Educators will have access to the educational materials developed which may lead to the better assessment of students' cybersecurity skills. This new interactive animated visualization framework for high school cybersecurity education has the potential for wider, nationwide adoption. As cybersecurity continues to become a national and global security threat, this research will facilitate the development of a new generation of workforce and a safer cyber-environment.The project will develop an innovative teaching plan and pedagogical methods for high school cybersecurity education. The framework will be designed and used in a summer camp setting to help students understand cybersecurity threats, defense, and prevention mechanisms. Open-source smartphone app development tools will be integrated into the curriculum to determine if the framework aids teens in understanding the cybersecurity risks. A series of research questions will investigate the extent to which the "new" curriculum promotes a better understanding of cybersecurity. The effectiveness and rigor of this curriculum will be measured in several ways, including (a) using a task load index to quantify rigor, (b) administering surveys to gain insight about students' motivation and perceptions of cybersecurity, and (c) analyzing students' learning using analytical course rubrics. Deliverables of this project will involve (a) interactive animated visualization based cybersecurity tutorials for summer camp mode delivery to high school students, (b) availability of all tutorials for accessibility to other educators, and (c) publications and meeting presentations to share project outcomes more widely.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

青少年中的技术使用大大增加，但这一人群的网络安全技能却没有随之增加。一些因素，包括缺乏标准的高中网络安全课程，以及青少年缺乏网络安全意识，导致青少年成为网络欺凌等网络犯罪的目标。这项研究旨在利用青少年对技术的使用增加，以（a）在高中阶段培养安全思维，（B）传播对使用智能手机/平板电脑和其他技术相关的风险和威胁的认识，以及（c）灌输对网络安全职业的兴趣（长期目标是解决国家网络安全劳动力短缺问题）。该项目旨在通过交互式动画可视化提供网络安全培训来实现这些目标，以便学生培养对网络安全职业的兴趣。教育工作者将能够获得开发的教育材料，这可能会导致更好地评估学生的网络安全技能。这种新的交互式动画可视化框架，高中网络安全教育有可能更广泛，全国范围内采用。随着网络安全继续成为国家和全球安全威胁，这项研究将促进新一代劳动力和更安全的网络环境的发展。该项目将为高中网络安全教育开发创新的教学计划和教学方法。该框架将在夏令营环境中设计和使用，以帮助学生了解网络安全威胁，防御和预防机制。开源智能手机应用程序开发工具将被整合到课程中，以确定该框架是否有助于青少年理解网络安全风险。一系列研究问题将调查“新”课程在多大程度上促进了对网络安全的更好理解。该课程的有效性和严谨性将通过几种方式进行衡量，包括（a）使用任务负荷指数来量化严谨性，（B）进行调查，以了解学生的动机和对网络安全的看法，以及（c）使用分析课程标题分析学生的学习情况。该项目的可行性将包括：（a）以夏令营模式向高中生提供基于交互式动画可视化的网络安全教程，（B）提供所有教程，供其他教育工作者使用，以及（c）该奖项反映了NSF的法定使命，并被认为值得通过使用基金会的知识产权进行评估来支持。优点和更广泛的影响审查标准。

项目成果

Practice-Oriented Smartphone Security Exercises for Developing Cybersecurity Mindset in High School Students

以实践为导向的智能手机安全练习，培养高中生的网络安全心态

• DOI: 10.1109/tale48869.2020.9368440
• 发表时间: 2020
• 期刊: and Learning for Engineering (TALE
• 作者: Podila, Laxmi M.;Bandreddi, Jyothi P.;Campos, Javier I.;Niyaz, Quamar;Yang, Xiaoli;Trekles, Anastasia;Czerniak, Charlene;Javaid, Ahmad Y.
• 通讯作者: Javaid, Ahmad Y.

Permission-Educator: App for Educating Users About Android Permissions

Permission-Educator：用于对用户进行 Android 权限教育的应用程序

• DOI: 10.1007/978-3-030-98404-5_34
• 发表时间: 2022
• 期刊: Cham
• 作者: Mathur, Akshay;Ewoldt, Ethan;Niyaz, Quamar;Javaid, Ahmad;Yang, Xiaoli
• 通讯作者: Yang, Xiaoli

An Introductory Visualization Aid for Cybersecurity Education

网络安全教育的可视化入门辅助工具

• 发表时间: 2019
• 期刊: (FECS 19
• 作者: Aguayo, Gabriel Castro;Morales, Ulises;Long, Xiaoyu;Niyaz, Quamar;Yang, Xiaoli;and Javaid, Ahmad Y.
• 通讯作者: and Javaid, Ahmad Y.