SaTC-EDU: Case Analysis for Security Education (CASE)

网络攻击、数据泄露和安全漏洞的严重性和发生率不断增加，导致对具有强大网络安全技能的个人的需求很高。利用现实世界的网络漏洞作为课堂案例研究可以改善学生的学习，促进网络安全教育的创新，并弥合大学教育和行业需求之间的差距。这些案例可以激发学生对网络安全的真正兴趣，吸引更多的人进入该领域，帮助建立网络安全人才队伍。此外，网络案例研究提供体验式学习，学生可以将课堂知识应用于真实的世界场景。最后，通过对企业安全以及人和业务因素等复杂的社会技术要素的全面理解，使学生更好地满足行业需求。本项目将开发一种新的框架，称为CASE（安全教育案例分析），旨在系统地探索案例研究在网络安全教育中的应用。通过剖析和分析现实世界的网络漏洞和漏洞，学生将深入了解整个网络攻击过程，从开始到结束。学生将学习相关的安全主题和策略，如何保护网络和系统，以及如何防止或应对攻击。此外，学生将能够利用现实世界场景中详细描述的类似工具和方法复制虚拟实验室平台中的某些漏洞和漏洞。通过围绕案例研究的指导实践实验室挑战，学生将探索网络安全中的各种进攻和防御技术，对网络系统有全面的了解，并通过真实世界的场景获得最佳实践的知识。该项目的成果将包括一个真实世界的网络漏洞案例研究库，以及一系列实践和虚拟实验室平台，使学生能够复制网络案例。该项目得到了安全和值得信赖的网络空间（SaTC）计划的支持，该计划资助解决网络安全和隐私问题的提案，在这种情况下，特别是网络安全教育。SATC计划与联邦网络安全研究和发展战略计划和国家隐私研究战略保持一致，以保护和维护网络系统日益增长的社会和经济效益，同时确保安全和隐私。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

The increasing severity and occurrence of cyberattacks, data breaches, and security vulnerabilities have led to a high demand for individuals with strong cybersecurity skills. Utilizing real-world cyber breaches as case studies in classrooms can improve student learning, foster innovation in cybersecurity education, and bridge the gap between university education and industry needs. These cases can generate genuine interest in cybersecurity among students and attract more individuals to the field, helping to build the cybersecurity workforce. Furthermore, cyber case studies offer experiential learning, where students can apply classroom knowledge to real world scenarios. Lastly, they can prepare students to better meet industry needs by offering a comprehensive understanding of enterprise security and complex socio-technical components such as human and business factors.This project will develop a new framework called CASE (Case Analysis for Security Education), which aims to systematically explore the use of case studies in cybersecurity education. By dissecting and analyzing real-world cyber breaches and vulnerabilities, students will gain insight into the entire cyberattack process, from start to finish. Students will learn about relevant security topics and tactics, how to secure networks and systems, and how to prevent or respond to attacks. Additionally, students will be able to replicate certain breaches and vulnerabilities in virtual lab platforms utilizing comparable tools and methods as detailed in real-world scenarios. Through guided hands-on lab challenges centered around the case studies, students will explore a variety of offensive and defensive techniques in cybersecurity, develop a holistic understanding of cyber systems, and acquire knowledge of best practices through real-world scenarios. The project outcomes will consist of a repository of real-world cyber breach case studies, as well as a collection of hands-on and virtual lab platforms that enable students to replicate cyber cases.This project is supported by the Secure and Trustworthy Cyberspace (SaTC) program, which funds proposals that address cybersecurity and privacy, and in this case specifically cybersecurity education. The SaTC program aligns with the Federal Cybersecurity Research and Development Strategic Plan and the National Privacy Research Strategy to protect and preserve the growing social and economic benefits of cyber systems while ensuring security and privacy.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.