SaTC-EDU: Improving computer forensic curricula through hands-on hardware and software training and practical experience processing evidence from active criminal cases

社会对技术和数字空间的依赖导致基于网络的犯罪活动迅速增长，威胁到国家安全。这就迫切需要发展教育实践，为当前和未来的劳动力调查网络威胁和处理数字证据做好准备。实现理论教育与实践教育有效平衡的策略尚未充分确定。为了解决对有效和平衡的教育实践的需求，该项目将把主动学习教学法引入现有的计算机取证课程。然后将根据学生的成功和行业相关技能的发展来衡量其效果。测量将以三种方式完成。首先，通过评估法医学、计算机科学和刑事司法课程的适当平衡和排序，培养对理论的深刻理解。第二，通过课堂培训，使用学科内目前使用的硬件和软件，培养入门级岗位的强大实用技能。第三，通过提供需要处理来自正在进行的刑事调查的数字证据的实践实习，提供工作经验和职业培训。由于圣何塞州立大学既是一所为西班牙裔服务的机构，也是一所为亚裔美国人和太平洋岛民服务的机构，因此将重点关注这些课程变化如何有助于网络安全劳动力的多样化。计算机法医（CF）调查员需要一个独特的教育平衡法医，计算机科学和刑事司法。这不仅包括理论基础，还包括处理数字证据的实践经验。为了满足这些需求，教育将通过亲身体验数字证据来源（设备）的最新趋势，纳入有关该学科内使用的技术和当前最佳做法的培训。现有的学习环境将以三种不同的方式进行修改，并进行评估，以衡量对学生成功和职场准备的影响，特别是在代表性不足的群体中。首先，通过确定学生在跨学科课程中的导航路径（例如，课程顺序，预先存在的知识）如何影响项目的成功完成，以及如何修改这些路径可以提高学生的成功。第二，将主动学习教学法引入课堂，对CF从业者目前使用的硬件和软件进行培训。第三，通过开发实验室基础设施，让学生完成实习，在那里他们可以对正在进行的刑事案件进行数字证据调查。这些修改的有效性将通过与CF从业者就该学科所需的技能集、学生导航和活动的调查、实验室实习经历的调查以及毕业生成功过渡到该学科内职业的能力的调查来衡量。研究结果将通过在线开源教育材料、向刑事司法机构和高等教育机构的报告以及同行评议的出版物传播。结果的传播将有助于在其他机构开发有效的CF课程。该项目由安全与可信网络空间（SaTC）计划支持，该计划资助解决网络安全和隐私问题的提案，在这种情况下，特别是网络安全教育。SaTC项目与《联邦网络安全研究与发展战略计划》和《国家隐私研究战略》保持一致，旨在保护和维护网络系统日益增长的社会和经济效益，同时确保安全和隐私。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Society’s reliance on technology and digital spaces has led to a rapid growth in cyber-based criminal activities that threaten national security. This generated a critical need for developing educational practices that prepare the current and future workforce to investigate cyber threats and process digital evidence. Strategies to achieve effective balance of theoretical and practical education are yet to be fully determined. To address the need for effective and balanced educational practices, this project will introduce active-learning pedagogy into an existing computer forensics curriculum. Its effect will then be measured based on student success and development of industry-relevant skills. Measurement will be accomplished in three ways. First, through evaluating the appropriate balance, and ordering, of forensic, computer science, and criminal justice courses needed to develop a strong theoretical understanding. Second, through introducing classroom training with hardware and software currently used within the discipline, to develop strong practical skills for entry-level positions. Third, through providing hands-on internships that require processing of digital evidence from active criminal investigations to provide work experience and job training. As San Jose State University is both a Hispanic-Serving Institution and an Asian American and Pacific Islander-Serving Institution, a focus will be placed on how these curricular changes contribute to the diversification of the cybersecurity workforce. Computer forensic (CF) investigators require a unique education balancing forensics, computer science, and criminal justice. This includes not only a theoretical foundation, but also practical experience processing digital evidence. To meet these needs, education will incorporate training on the technologies and current best practices used within the discipline through hands-on experiences with the latest trends in sources (devices) of digital evidence. Existing learning environments will be modified in three different ways and evaluated to measure the impacts on student success and workplace preparedness, especially among underrepresented groups. First, by identifying how students’ navigational path (e.g., order of courses, pre-existing knowledge) within the interdisciplinary coursework impacts the successful completion of the program, and how modifications to these pathways can increase student success. Second, by introducing active-learning pedagogy into the classroom and training on hardware and software currently used by CF practitioners. Third, by developing a laboratory infrastructure for students to complete internships where they can conduct digital evidence investigations on active criminal cases. The effectiveness of these modifications will be measured through interviews with CF practitioners on the skill sets required for the discipline, surveys of student navigation and activities, surveys of laboratory intern experiences, and surveys of graduates' abilities to successfully transition into careers within the discipline. Results will be disseminated through online open-source educational materials, presentations to criminal justice agencies and higher education institutions, and peer-reviewed publications. Dissemination of results will aid the development of effective CF curriculum at other institutions. This project is supported by the Secure and Trustworthy Cyberspace (SaTC) program, which funds proposals that address cybersecurity and privacy, and in this case specifically cybersecurity education. The SaTC program aligns with the Federal Cybersecurity Research and Development Strategic Plan and the National Privacy Research Strategy to protect and preserve the growing social and economic benefits of cyber systems while ensuring security and privacy.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.