Collaborative Research: Building A Cybersecurity Mindset Through Continuous Cross-module Learning

该项目旨在通过发展一支强大的网络安全队伍来服务于国家利益。美国劳工统计局预测，从2021年到2031年，网络安全领域的就业增长率将达到35%，超过所有就业岗位5%的平均增长率。满足对合格网络安全专业人员的需求，既需要传授网络安全技术技能，也需要培养网络安全思维。该项目将使用以威胁为导向的方法开发网络安全模块，从而形成一个可转移的实验室框架，并进行实际网络安全演习。该框架将利用“构建、破坏和修复”的概念，即学生基于非网络安全课程内容构建应用程序，然后通过发现和利用漏洞来破坏应用程序，然后使用适当的网络安全实践来修复应用程序。该项目的目标是实现有效的跨模块学习，促进对计算机科学专业学生的网络安全教育，并帮助他们建立网络安全心态。该项目旨在通过以下方式探索网络安全跨模块学习的有效学习途径：1)确定可整合网络安全模块的适当非网络安全计算机科学课程；2)设计多层次整合战略；3)探索不同课程和模块之间的潜在联系。该项目计划开发带有课程材料的网络安全模块，使用威胁驱动的方法来支持跨模块学习。该项目还打算定制和改造学习模块和工具，以通过网络研讨会、夏令营和在线资料库支持K-12外联活动。NSF IUSE：EDU计划支持研究和开发项目，以提高所有学生的STEM教育的有效性。通过参与式学生学习路径，该计划支持创建、探索和实施有前途的实践和工具。该项目也得到了NSF IUSE：HSI计划的支持，该计划的目标是提高STEM本科教育的质量，并增加STEM专科或学士学位学生的招生、留住和毕业率。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

This project aims to serve the national interest by developing a strong cybersecurity workforce. The U.S. Bureau of Labor Statistics projects that the growth rate of employment in cybersecurity will be 35% from 2021 to 2031, a rate that exceeds the average growth rate of all jobs at 5%. Meeting the demand for qualified cybersecurity professionals requires teaching both technical cybersecurity skills and developing a cybersecurity mindset. This project will develop cybersecurity modules using the threat-driven approach resulting in a transferable laboratory framework with hands-on cybersecurity exercises. The framework will utilize the "build it, break it, and fix it” concept where students build applications based on non-cybersecurity course content, then break the applications by discovering and exploiting vulnerabilities, and then fixing the applications using appropriate cybersecurity practices.The goal of this project is to enable effective cross-module learning that promotes cybersecurity education for computer science students and helps them build a cybersecurity mindset. The project intends to investigate effective learning paths for cybersecurity cross-module learning by 1) identifying appropriate non-cybersecurity computer science courses in which cybersecurity modules can be integrated, 2) designing multi-level integration strategies, and 3) exploring potential linkages among different courses and modules. This project plans to develop cybersecurity modules with curriculum materials using the threat-driven approach to support cross-module learning. This project also intends to tailor and transform learning modules and tools to support K-12 outreach via webinars, summer camps, and online repositories. The NSF IUSE: EDU Program supports research and development projects to improve the effectiveness of STEM education for all students. Through the Engaged Student Learning track, the program supports the creation, exploration, and implementation of promising practices and tools. This project is also supported by the NSF IUSE:HSI program, which has the goals of enhancing the quality of undergraduate STEM education, and increasing the recruitment, retention, and graduation rates of students pursuing associate’s or baccalaureate degrees in STEM.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.