EDU: Enhancing and Broadening Computer Security Education with Stepwise and Reusable Problem-solving Challenges

这个项目探索通过使用解决实际问题的挑战来加强计算机安全教育的方法。调查人员正在逐步构建可重复使用的安全挑战，以模拟涉及计算机攻击和防御策略的真实世界场景。为此，该项目借鉴了举办计算机安全竞赛(如夺旗)的成功经验和做法，并为教师提供了一个可重复使用的平台，用于设计和管理竞赛式的挑战，以达到计算机安全和信息保障教育的目的。调查人员还在开发与计算机安全有关的新教材，可以更容易地整合到相关的非安全计算机科学课程中。其主要目标是通过发展一种“交叉”教学方法来扩大计算机安全教育，在大多数计算机科学核心课程中教授基本计算机安全概念，从低水平的本科课程到高水平的本科课程，再到核心研究生课程。此外，该项目创造了一个机会，使新开发的教育材料进一步适应更多的受众，向信息技术专业人员提供入门信息安全教育，并提高对一般信息安全问题的认识。

This project explores methods for enhancing computer security education through the use of practical problem-solving challenges. The investigators are building step-wise and parametrized reusable security challenges that mimic real-world scenarios involving computer attacks and defense strategies. To this end, the project borrows ideas and practices from successful experiences in building computer security competitions such as capture-the-flag, and provides instructors with a reusable platform for designing and managing competition-style challenges for the purpose of computer security and information assurance education. The investigators are also developing new educational material related to computer security that can be more easily integrated into relevant non-security computer science courses. The main goal is to broaden computer security education by developing a "cross-cutting" teaching approach, whereby fundamental computer security concepts are taught in most core computer science courses, from lower-level undergraduate courses, to upper-level undergraduate, to core graduate courses. Moreover, this project creates an opportunity to further adapt the newly developed education material to a larger audience, offering introductory information security education to IT professionals and increasing awareness regarding information security problems in general.