Collaborative Research: Building A Cybersecurity Mindset Through Continuous Cross-module Learning

该项目旨在通过培养强大的网络安全劳动力来服务于国家利益。美国劳工统计局预计，从2021年到2031年，网络安全领域的就业增长率将达到35%，超过所有就业岗位5%的平均增长率。满足对合格网络安全专业人员的需求，既需要教授网络安全技术技能，又需要培养网络安全思维。该项目将使用威胁驱动的方法开发网络安全模块，从而形成可转移的实验室框架，并进行实际的网络安全练习。该框架将利用“构建它，破坏它，修复它”的概念，即学生基于非网络安全课程内容构建应用程序，然后通过发现和利用漏洞来破坏应用程序，然后使用适当的网络安全实践修复应用程序。该项目的目标是实现有效的跨模块学习，促进计算机科学学生的网络安全教育，并帮助他们建立网络安全思维。本项目拟通过以下途径探索网络安全跨模块学习的有效路径：1)识别可集成网络安全模块的合适非网络安全计算机科学课程；2)设计多层次集成策略；3)探索不同课程和模块之间的潜在联系。该项目计划使用威胁驱动的方法开发网络安全模块和课程材料，以支持跨模块学习。该项目还打算定制和改造学习模块和工具，以支持通过网络研讨会、夏令营和在线存储库进行的K-12扩展。NSF IUSE: EDU项目支持研究和开发项目，以提高所有学生STEM教育的有效性。通过参与学生学习轨道，该计划支持有前途的实践和工具的创建，探索和实施。该项目还得到了NSF IUSE:HSI计划的支持，该计划的目标是提高STEM本科教育的质量，提高攻读STEM副学士学位或学士学位的学生的招聘、保留和毕业率。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

This project aims to serve the national interest by developing a strong cybersecurity workforce. The U.S. Bureau of Labor Statistics projects that the growth rate of employment in cybersecurity will be 35% from 2021 to 2031, a rate that exceeds the average growth rate of all jobs at 5%. Meeting the demand for qualified cybersecurity professionals requires teaching both technical cybersecurity skills and developing a cybersecurity mindset. This project will develop cybersecurity modules using the threat-driven approach resulting in a transferable laboratory framework with hands-on cybersecurity exercises. The framework will utilize the "build it, break it, and fix it” concept where students build applications based on non-cybersecurity course content, then break the applications by discovering and exploiting vulnerabilities, and then fixing the applications using appropriate cybersecurity practices.The goal of this project is to enable effective cross-module learning that promotes cybersecurity education for computer science students and helps them build a cybersecurity mindset. The project intends to investigate effective learning paths for cybersecurity cross-module learning by 1) identifying appropriate non-cybersecurity computer science courses in which cybersecurity modules can be integrated, 2) designing multi-level integration strategies, and 3) exploring potential linkages among different courses and modules. This project plans to develop cybersecurity modules with curriculum materials using the threat-driven approach to support cross-module learning. This project also intends to tailor and transform learning modules and tools to support K-12 outreach via webinars, summer camps, and online repositories. The NSF IUSE: EDU Program supports research and development projects to improve the effectiveness of STEM education for all students. Through the Engaged Student Learning track, the program supports the creation, exploration, and implementation of promising practices and tools. This project is also supported by the NSF IUSE:HSI program, which has the goals of enhancing the quality of undergraduate STEM education, and increasing the recruitment, retention, and graduation rates of students pursuing associate’s or baccalaureate degrees in STEM.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.