SaTC-EDU: EAGER: Enhancing Cybersecurity Education through Peer Review

同行评议是一个众所周知的过程，同行通过它来评价彼此的工作。 在教育环境中，同行评议涉及学生评价同学的工作。 同伴评价可以达到许多教育目的：他们培养理解能力（当学生阅读他人的作品时），鼓励自我评估和元反思（当学生将自己的解决方案与他人的解决方案进行对比时），要求从多个角度综合评论（当学生联合收割机从多个评论中得到反馈时），并围绕给予和接受同事的批评发展专业技能。教育同行评议试图培养的技能在网络安全中至关重要：代码审查是现代工业软件实践的一部分（并且已经识别出了引人注目的安全错误），安全问题是多方面的，并且需要能够综合许多利益相关者的需求的开发人员，并且开发人员必须在通过不同来源和过程识别的漏洞中进行优先级排序。 同侪互评强调发展学生的反思能力，因此有望成为安全专业人员培训的一种有价值的机制。 然而，有许多同行评议的配置，每一种都可以以不同的方式吸引学生。 因此，将同行评议配置与网络安全学习成果联系起来的教育研究对于有效使用这一机制至关重要。本项目将在各种网络安全课程中试验同行评议配置。 课程涵盖网络安全的几个领域（软件，系统和政策），以及本科生和研究生。 该项目将探讨如何通过同行评审体现各种网络安全特定的学习目标。它还将产生软件基础设施，用于在各种课程和配置中使用和评估同行评审。 该项目的预期成果包括对学生审查实践的观察，关于如何在安全教育中成功使用同行审查的精炼研究问题，以及其他人可以用于类似项目的软件工具（将公开提供）。

Peer-review is a well-known process by which peers evaluate one another's work. In educational settings, peer review involves students evaluating the work of classmates. Peer evaluations can serve many educational purposes: they foster comprehension skills (as students read the work of others), encourage self-assessment and meta-reflection (as students contrast their solutions to others'), demand synthesis of comments from multiple perspectives (as students combine feedback from multiple reviews), and develop professional skills around giving and receiving critique from colleagues.The skills that educational peer review attempts to foster are critical in cybersecurity: code review is part of modern industrial software practice (and has identified high-profile security bugs), security problems are multi-faceted and require developers who can synthesize needs of many stakeholders, and developers must prioritize among vulnerabilities identified through different sources and processes. Peer review, with its emphasis on developing students' reflective skills, thus promises to be a valuable mechanism in training security professionals. There are, however, many configurations of peer review, each of which could engage students in different ways. Educational research focused on linking peer review configurations to learning outcomes in cybersecurity is thus critical to using this mechanism effectively.This project will experiment with peer-review configurations in a variety of cybersecurity courses. The courses span several areas of cybersecurity (software, system, and policy), as well as both undergraduate and graduate students. The project will explore how various cybersecurity-specific learning objectives manifest through peer review. It will also yield software infrastructure for using and assessing peer review across a variety of courses and configurations. Expected deliverables from the project include observations about students' reviewing practices, refined research questions about how to use peer-review successfully in security education, and software tools that others can use for similar projects (which will be made publicly available).