EAGER: Developing Cybersecurity Judgment Questionnaire for GenCyber Campers

GenCyber倡议由美国国家科学基金会和美国国家安全局联合发起，始于2014年，旨在为K-12级别的学生和教师提供夏季网络安全夏令营体验。2016年，共有135个营地，涉及约6000名学生和1200名教师。为了帮助评估和实现GenCyber的目标之一，理解正确和安全的在线行为，该项目旨在开发一种创新工具--网络安全判断问卷(CJQ)，用于评估中学生和高中生对网络安全的理解。CJQ基于丹尼尔·卡尼曼的启发式和偏见理论，专注于网络安全判断，而不是网络安全行为或网络安全意识，因为普通人的日常行为在很大程度上受到他们直觉思维的影响，因此进入年轻网民的头脑并比较他们的直觉和理性的网络安全思维是很重要的。问卷采用调查实验法，综合了调查和实验的长处，以有效和高效地收集数据。此外，为了评估真实的网络安全判断，该项目将使用真实生活场景，要求年轻的网络用户直观而理性地判断风险，而不是要求参与者回答简单的多项选择问题。该项目将试图验证和扩展丹尼尔·卡纳曼的启发式理论和偏见，在整个网络空间，特别是在网络安全领域。它将使用基于情景的调查实验和析因设计来开发、验证和测试网络安全判断的测量。这项测量为评估GenCyber学生露营者对网络安全的了解提供了一种工具。此外，年轻的网络用户可以看到他们针对可能的网络攻击的特定漏洞，以及他们在保护网络安全方面的潜在优势。

GenCyber Initiative, co-sponsored by the National Science Foundation and the National Security Agency, started in 2014 to provide summer cybersecurity camp experiences for students and teachers at the K-12 level. In 2016, there are 135 camps involving approximate 6000 students and 1200 teachers. To help assess and achieve one of the goals of GenCyber, understanding correct and safe on-line behavior, the proposed project aims to develop an innovative tool, the Cybersecurity Judgment Questionnaire (CJQ), for assessing middle and higher school students' understanding of cybersecurity.CJQ is based on the heuristics and biases theory by Daniel Kahneman and focuses on cybersecurity judgment rather than on cybersecurity behavior or cybersecurity awareness because ordinary people's daily behavior is significantly influenced by their intuitive thinking and thus it is important to get into young cyber users' minds and compare their intuitive and rational cybersecurity thinking. The questionnaire employs the survey experiment approach that integrates the strengths of both surveys and experiments to collect data effectively and efficiently. In addition, to assess authentic cybersecurity judgment, it will use a real-life scenarios and ask young cyber users to judge the risk intuitively and rationally rather than asking participants to answer simple multiple-choice questions.The project will attempt to verify and extend Daniel Kahneman's theory of heuristics and biases in the cyberspace in general and in the cybersecurity domain in particular. It will use the scenario-based survey experiment with the factorial design to develop, validate, and test the measurement of cybersecurity judgment. The measurement provides a tool to assess cybersecurity understanding of GenCyber student campers. In addition, young cyber users can see both their specific vulnerabilities for possible cyber-attacks and their potential strengths for protecting cybersecurity.