SaTC-EDU: Improving computer forensic curricula through hands-on hardware and software training and practical experience processing evidence from active criminal cases

社会对技术和数字空间的依赖导致威胁国家安全的基于网络的犯罪活动迅速增长。这就产生了发展教育实践的迫切需要，使当前和未来的劳动力为调查网络威胁和处理数字证据做好准备。实现理论教育和实践教育有效平衡的战略尚未完全确定。为了满足有效和平衡的教育实践的需要，该项目将在现有的计算机取证课程中引入主动学习教学法。然后，它的效果将基于学生的成功和行业相关技能的发展来衡量。测量将通过三种方式完成。首先，通过评估法医、计算机科学和刑事司法课程的适当平衡和排序，需要发展强大的理论理解。第二，通过引入本学科目前使用的硬件和软件的课堂培训，为入门岗位培养较强的实践技能。第三，通过提供需要处理正在进行的刑事调查中的数字证据的实践实习机会，提供工作经验和职业培训。由于圣何塞州立大学既是一所为拉美裔美国人服务的机构，也是一所为亚裔美国人和太平洋岛民服务的机构，我们将把重点放在这些课程改革如何有助于网络安全劳动力的多样化。计算机取证(CF)调查人员需要一种平衡取证、计算机科学和刑事司法的独特教育。这不仅包括理论基础，还包括处理数字证据的实践经验。为了满足这些需求，教育将通过对数字证据来源(设备)最新趋势的亲身体验，纳入关于该学科使用的技术和当前最佳做法的培训。将以三种不同的方式修改现有的学习环境，并对其进行评估，以衡量对学生成功和工作场所准备的影响，特别是在代表性不足的群体中。首先，通过确定学生在跨学科课程工作中的导航路径(例如，课程顺序、先前存在的知识)如何影响课程的成功完成，以及对这些路径的修改如何能够提高学生的成功。第二，将主动学习教学法引入课堂，并对当前CF实践者使用的硬件和软件进行培训。第三，开发实验室基础设施，让学生完成实习，在那里他们可以对正在审理的刑事案件进行数字证据调查。这些修改的有效性将通过与CF从业者就该学科所需技能集的访谈、对学生导航和活动的调查、对实验室实习经验的调查以及对毕业生成功过渡到该学科内的职业能力的调查来衡量。结果将通过在线开源教育材料、向刑事司法机构和高等教育机构的演示以及同行评议的出版物传播。结果的传播将有助于在其他机构开发有效的CF课程。这个项目得到了安全和值得信赖的网络空间(SATC)计划的支持，该计划为解决网络安全和隐私问题的提案提供资金，在这种情况下，特别是网络安全教育。SATC计划与联邦网络安全研究和发展战略计划和国家隐私研究战略保持一致，以保护和维护网络系统日益增长的社会和经济效益，同时确保安全和隐私。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

Society’s reliance on technology and digital spaces has led to a rapid growth in cyber-based criminal activities that threaten national security. This generated a critical need for developing educational practices that prepare the current and future workforce to investigate cyber threats and process digital evidence. Strategies to achieve effective balance of theoretical and practical education are yet to be fully determined. To address the need for effective and balanced educational practices, this project will introduce active-learning pedagogy into an existing computer forensics curriculum. Its effect will then be measured based on student success and development of industry-relevant skills. Measurement will be accomplished in three ways. First, through evaluating the appropriate balance, and ordering, of forensic, computer science, and criminal justice courses needed to develop a strong theoretical understanding. Second, through introducing classroom training with hardware and software currently used within the discipline, to develop strong practical skills for entry-level positions. Third, through providing hands-on internships that require processing of digital evidence from active criminal investigations to provide work experience and job training. As San Jose State University is both a Hispanic-Serving Institution and an Asian American and Pacific Islander-Serving Institution, a focus will be placed on how these curricular changes contribute to the diversification of the cybersecurity workforce. Computer forensic (CF) investigators require a unique education balancing forensics, computer science, and criminal justice. This includes not only a theoretical foundation, but also practical experience processing digital evidence. To meet these needs, education will incorporate training on the technologies and current best practices used within the discipline through hands-on experiences with the latest trends in sources (devices) of digital evidence. Existing learning environments will be modified in three different ways and evaluated to measure the impacts on student success and workplace preparedness, especially among underrepresented groups. First, by identifying how students’ navigational path (e.g., order of courses, pre-existing knowledge) within the interdisciplinary coursework impacts the successful completion of the program, and how modifications to these pathways can increase student success. Second, by introducing active-learning pedagogy into the classroom and training on hardware and software currently used by CF practitioners. Third, by developing a laboratory infrastructure for students to complete internships where they can conduct digital evidence investigations on active criminal cases. The effectiveness of these modifications will be measured through interviews with CF practitioners on the skill sets required for the discipline, surveys of student navigation and activities, surveys of laboratory intern experiences, and surveys of graduates' abilities to successfully transition into careers within the discipline. Results will be disseminated through online open-source educational materials, presentations to criminal justice agencies and higher education institutions, and peer-reviewed publications. Dissemination of results will aid the development of effective CF curriculum at other institutions. This project is supported by the Secure and Trustworthy Cyberspace (SaTC) program, which funds proposals that address cybersecurity and privacy, and in this case specifically cybersecurity education. The SaTC program aligns with the Federal Cybersecurity Research and Development Strategic Plan and the National Privacy Research Strategy to protect and preserve the growing social and economic benefits of cyber systems while ensuring security and privacy.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.