Collaborative Research: EAGER: Enhancing the Cyber Security Workforce - The Human Angle

协作研究：EAGER：增强网络安全劳动力 - 人的角度

• 批准号: 1342091
• 负责人: Nasir Memon
• 金额: $ 13.81万
• 依托单位: New York University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2013
• 资助国家: 美国
• 起止时间: 2013-08-15 至 2016-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1342091&HistoricalAwards=false
• 关键词: Collaborative; Research; EAGER; Enhancing; Cyber

The proposed study provides extensive new data in two scarcely examined research areas. The first is the overall impact that cyber competitions have on enhancing the cybersecurity workforce. There is widespread anecdotal evidence of the benefits of individual competitions, but a large-scale, carefully constructed study is needed to determine outcomes and causal relationships. Additionally, it is the first thorough examination of the psychological characteristics of people interested in cybersecurity. Related research has examined the personality traits of IT professionals, the cognitive styles of computer "hackers," and the academic abilities associated with success in STEM programs. However, no studies have focused exclusively on the cybersecurity field. The findings hold promise to transform existing ideas about the types of people who are qualified and willing to pursue careers in cybersecurity. Increasing the number of trained cybersecurity professionals is crucial to the continued success of both public and private enterprises. Competitions, such as NYU-Poly's digital "Capture the Flag" challenge, represent a promising approach towards accomplishing that goal using hands-on competition as a stimulus for learning. However, in order to improve the efficacy of future challenges, it is first necessary to examine the impact of past endeavors. Competitions present a unique opportunity to explore the psyche of individuals who have already displayed an interest in cybersecurity. Examining that population provides insight into the reasons why certain qualified individuals pursue careers in cybersecurity, while others do not. Such insight can also serve as an invaluable guide for the organizers of future efforts aimed at attracting a larger number of talented individuals to the cybersecurity workforce.

拟议的研究在两个很少被研究的研究领域提供了广泛的新数据。首先是网络竞赛对增强网络安全劳动力的总体影响。有广泛的轶事证据表明个人竞赛的好处，但需要进行大规模、精心构建的研究来确定结果和因果关系。此外，这是对网络安全感兴趣的人的心理特征的首次彻底检查。相关研究考察了 IT 专业人员的个性特征、计算机“黑客”的认知风格以及与 STEM 项目成功相关的学术能力。然而，没有研究专门关注网络安全领域。这些发现有望改变关于合格并愿意从事网络安全职业的人员类型的现有观念。增加训练有素的网络安全专业人员的数量对于公共和私营企业的持续成功至关重要。诸如纽约大学理工学院的数字“夺旗”挑战之类的竞赛代表了一种通过实践竞赛来刺激学习来实现这一目标的有希望的方法。然而，为了提高未来挑战的有效性，首先有必要审视过去努力的影响。竞赛提供了一个独特的机会来探索那些已经对网络安全表现出兴趣的个人的心理。通过检查该人群，可以深入了解某些合格的个人从事网络安全职业而其他人则不从事的原因。这种见解还可以为组织者未来吸引更多人才加入网络安全队伍的努力提供宝贵的指导。