Collaborative Research: Building A Cybersecurity Mindset Through Continuous Cross-module Learning

该项目旨在通过发展强大的网络安全劳动力来服务于国家利益。美国劳工统计局预计，从2021年到2031年，网络安全就业增长率将达到35%，超过所有工作岗位5%的平均增长率。满足对合格网络安全专业人员的需求需要教授技术网络安全技能和培养网络安全思维。该项目将使用威胁驱动的方法开发网络安全模块，从而形成一个可转移的实验室框架，并进行实际的网络安全练习。该框架将利用“构建它，破坏它，修复它”的概念，学生根据非网络安全课程内容构建应用程序，然后通过发现和利用漏洞来破坏应用程序，然后使用适当的网络安全实践来修复应用程序。该项目的目标是实现有效的跨模块学习，促进计算机科学专业学生的网络安全教育，并帮助他们建立网络安全的心态。该项目旨在通过以下方式调查网络安全跨模块学习的有效学习路径：1）确定适当的非网络安全计算机科学课程，其中可以集成网络安全模块，2）设计多层次的集成策略，以及3）探索不同课程和模块之间的潜在联系。该项目计划使用威胁驱动的方法开发网络安全模块和课程材料，以支持跨模块学习。该项目还打算通过网络研讨会、夏令营和在线知识库来定制和改造学习模块和工具，以支持K-12的推广。NSF IUSE：EDU计划支持研究和开发项目，以提高所有学生STEM教育的有效性。通过学生的学习轨道，该计划支持创建，探索和实施有前途的做法和工具。该项目还得到了NSF IUSE：HSI项目的支持，该项目的目标是提高本科STEM教育的质量，并提高攻读STEM副学士或学士学位学生的录取率、保留率和毕业率。该奖项反映了NSF的法定使命，并通过使用基金会的智力价值和更广泛的影响审查标准进行评估，被认为值得支持。

This project aims to serve the national interest by developing a strong cybersecurity workforce. The U.S. Bureau of Labor Statistics projects that the growth rate of employment in cybersecurity will be 35% from 2021 to 2031, a rate that exceeds the average growth rate of all jobs at 5%. Meeting the demand for qualified cybersecurity professionals requires teaching both technical cybersecurity skills and developing a cybersecurity mindset. This project will develop cybersecurity modules using the threat-driven approach resulting in a transferable laboratory framework with hands-on cybersecurity exercises. The framework will utilize the "build it, break it, and fix it” concept where students build applications based on non-cybersecurity course content, then break the applications by discovering and exploiting vulnerabilities, and then fixing the applications using appropriate cybersecurity practices.The goal of this project is to enable effective cross-module learning that promotes cybersecurity education for computer science students and helps them build a cybersecurity mindset. The project intends to investigate effective learning paths for cybersecurity cross-module learning by 1) identifying appropriate non-cybersecurity computer science courses in which cybersecurity modules can be integrated, 2) designing multi-level integration strategies, and 3) exploring potential linkages among different courses and modules. This project plans to develop cybersecurity modules with curriculum materials using the threat-driven approach to support cross-module learning. This project also intends to tailor and transform learning modules and tools to support K-12 outreach via webinars, summer camps, and online repositories. The NSF IUSE: EDU Program supports research and development projects to improve the effectiveness of STEM education for all students. Through the Engaged Student Learning track, the program supports the creation, exploration, and implementation of promising practices and tools. This project is also supported by the NSF IUSE:HSI program, which has the goals of enhancing the quality of undergraduate STEM education, and increasing the recruitment, retention, and graduation rates of students pursuing associate’s or baccalaureate degrees in STEM.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.