SaTC: EDU: Collaborative: Incorporating Sociotechnical Cybersecurity Learning Within Undergraduate Capstone Courses

所有技术专业人员都需要基本的网络安全能力。然而，典型的计算机课程不需要任何网络安全课程。因此，大多数学生毕业时都没有熟练掌握与他们加入工作岗位后将开发和使用的系统相关的网络安全知识。此外，网络安全选修课通常只涵盖技术主题，技术专业人员必须了解网络安全如何受到社会因素的影响。该项目将填补这一课程空白，并将开发、交付和评估一套社会技术网络安全学习模块。然后，这些模块可以用于标准计算课程，以创建一个精通网络安全的软件劳动力，可以显着增强工作场所的网络安全。这些模块将用于加州大学欧文分校（UCI）和印第安纳大学（IU）信息学的顶点课程。研究人员将利用这些模块对最关键和最基本的网络安全知识和技能进行评估。该研究的结果将促进对学生如何将社会技术网络安全能力作为其顶点体验的一部分的理解。由于顶点课程通常是毕业要求，因此将网络安全学习整合到这些课程中，将对所有计算机学科的学生产生变革性影响，使他们毕业时具备核心网络安全知识。作为研究活动的一部分，几组本科生将接受对他们职业生涯有用的网络安全培训。学习模块和评估将公开提供给其他教育工作者和机构。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

All technology professionals require basic proficiency in cybersecurity. However, typical computing curricula do not require any courses in cybersecurity. As a result, a majority of students graduate without any proficiency in cybersecurity relevant to the systems they will develop and use when they join the workforce. Moreover, cybersecurity electives often cover only technical topics, and technology professionals must understand how cybersecurity is influenced by social factors. This project will fill this curricular gap and will develop, deliver, and evaluate a suite of sociotechnical cybersecurity learning modules. These modules can then be used in standard computing curricula to create a cybersecurity proficient software workforce that can significantly enhance cybersecurity in the workplace.The modules will be used in capstone courses at Informatics at the University of California, Irvine (UCI) and Indiana University (IU). The researchers will utilize the modules to create an assessment for the most critical and essential cybersecurity knowledge and skills. The outcomes of the research will advance the understanding of how students could develop sociotechnical cybersecurity proficiency as a part of their capstone experience. Since capstones are typically a graduation requirement, integrating cybersecurity learning within these courses will have the transformative effect of all students in the computing disciplines graduating with core cybersecurity knowledge. As a part of the research activities, several cohorts of undergraduates will receive cybersecurity training useful for their professional careers. The learning modules and assessments will be openly available to other educators and institutions.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.