SaTC-EDU: Improving computer forensic curricula through hands-on hardware and software training and practical experience processing evidence from active criminal cases

SaTC-EDU：通过实际的硬件和软件培训以及处理活跃刑事案件证据的实践经验来改进计算机取证课程

• 批准号: 2304753
• 负责人: Bryce Westlake
• 金额: $ 49.85万
• 依托单位: San Jose State University Foundation
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2023
• 资助国家: 美国
• 起止时间: 2023-08-01 至 2026-07-31
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2304753&HistoricalAwards=false
• 关键词: SaTC; EDU; Improving; computer; forensic

Society’s reliance on technology and digital spaces has led to a rapid growth in cyber-based criminal activities that threaten national security. This generated a critical need for developing educational practices that prepare the current and future workforce to investigate cyber threats and process digital evidence. Strategies to achieve effective balance of theoretical and practical education are yet to be fully determined. To address the need for effective and balanced educational practices, this project will introduce active-learning pedagogy into an existing computer forensics curriculum. Its effect will then be measured based on student success and development of industry-relevant skills. Measurement will be accomplished in three ways. First, through evaluating the appropriate balance, and ordering, of forensic, computer science, and criminal justice courses needed to develop a strong theoretical understanding. Second, through introducing classroom training with hardware and software currently used within the discipline, to develop strong practical skills for entry-level positions. Third, through providing hands-on internships that require processing of digital evidence from active criminal investigations to provide work experience and job training. As San Jose State University is both a Hispanic-Serving Institution and an Asian American and Pacific Islander-Serving Institution, a focus will be placed on how these curricular changes contribute to the diversification of the cybersecurity workforce. Computer forensic (CF) investigators require a unique education balancing forensics, computer science, and criminal justice. This includes not only a theoretical foundation, but also practical experience processing digital evidence. To meet these needs, education will incorporate training on the technologies and current best practices used within the discipline through hands-on experiences with the latest trends in sources (devices) of digital evidence. Existing learning environments will be modified in three different ways and evaluated to measure the impacts on student success and workplace preparedness, especially among underrepresented groups. First, by identifying how students’ navigational path (e.g., order of courses, pre-existing knowledge) within the interdisciplinary coursework impacts the successful completion of the program, and how modifications to these pathways can increase student success. Second, by introducing active-learning pedagogy into the classroom and training on hardware and software currently used by CF practitioners. Third, by developing a laboratory infrastructure for students to complete internships where they can conduct digital evidence investigations on active criminal cases. The effectiveness of these modifications will be measured through interviews with CF practitioners on the skill sets required for the discipline, surveys of student navigation and activities, surveys of laboratory intern experiences, and surveys of graduates' abilities to successfully transition into careers within the discipline. Results will be disseminated through online open-source educational materials, presentations to criminal justice agencies and higher education institutions, and peer-reviewed publications. Dissemination of results will aid the development of effective CF curriculum at other institutions. This project is supported by the Secure and Trustworthy Cyberspace (SaTC) program, which funds proposals that address cybersecurity and privacy, and in this case specifically cybersecurity education. The SaTC program aligns with the Federal Cybersecurity Research and Development Strategic Plan and the National Privacy Research Strategy to protect and preserve the growing social and economic benefits of cyber systems while ensuring security and privacy.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

社会对技术和数字空间的依赖导致威胁国家安全的网络犯罪活动迅速增长。这就迫切需要开发教育实践，为当前和未来的劳动力调查网络威胁和处理数字证据做好准备。实现理论和实践教育有效平衡的战略尚未完全确定。为了满足有效和平衡的教育做法的需要，该项目将在现有的计算机取证课程中引入主动学习教学法。其效果将根据学生的成功和行业相关技能的发展来衡量。测量将通过三种方式完成。首先，通过评估法医学，计算机科学和刑事司法课程的适当平衡和排序，需要发展强大的理论理解。第二，通过引入课堂培训与硬件和软件目前使用的学科，发展强大的实用技能的入门级职位。第三，通过提供需要处理来自积极刑事调查的数字证据的实践实习，提供工作经验和职业培训。由于圣何塞州立大学既是一个西班牙裔服务机构，也是一个亚裔美国人和太平洋岛民服务机构，重点将放在这些课程的变化如何有助于网络安全劳动力的多样化。计算机取证（CF）调查人员需要平衡取证，计算机科学和刑事司法的独特教育。这不仅包括理论基础，还包括处理数字证据的实践经验。为了满足这些需求，教育将通过亲身体验数字证据来源（设备）的最新趋势，纳入有关该学科内使用的技术和当前最佳做法的培训。现有的学习环境将以三种不同的方式进行修改，并进行评估，以衡量对学生成功和工作场所准备的影响，特别是在代表性不足的群体中。首先，通过识别学生的导航路径（例如，课程的顺序，预先存在的知识）在跨学科课程影响该计划的成功完成，以及如何修改这些途径可以提高学生的成功。第二，通过将主动学习教学法引入课堂，并对CF从业人员目前使用的硬件和软件进行培训。第三，通过开发实验室基础设施，让学生完成实习，在那里他们可以对正在进行的刑事案件进行数字证据调查。 这些修改的有效性将通过与CF从业人员就学科所需的技能集进行访谈，学生导航和活动调查，实验室实习经验调查以及毕业生成功过渡到学科内职业生涯的能力调查来衡量。将通过在线开放源教育材料、向刑事司法机构和高等教育机构的介绍以及同行评审出版物传播成果。结果的传播将有助于其他机构开发有效的CF课程。 该项目得到了安全和值得信赖的网络空间（SaTC）计划的支持，该计划为解决网络安全和隐私问题的提案提供资金，在这种情况下，特别是网络安全教育。SATC计划与联邦网络安全研究和发展战略计划和国家隐私研究战略保持一致，以保护和维护网络系统日益增长的社会和经济效益，同时确保安全和隐私。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。