SaTC: EDU: Collaborative: INteractive VIsualization and PracTice basEd Cybersecurity Curriculum and Training (InviteCyber) Framework for Developing Next-gen Cyber-Aware Workforce

SATC：EDU：协作：基于交互式可视化和实践的网络安全课程和培训 (InviteCyber​​) 开发下一代网络意识劳动力的框架

• 批准号: 1903423
• 负责人: Xiaoli Yang
• 金额: $ 23.14万
• 依托单位: Purdue University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2019
• 资助国家: 美国
• 起止时间: 2019-08-01 至 2022-11-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1903423&HistoricalAwards=false
• 关键词: SaTC; EDU; Collaborative; INteractive; VIsualization

Technology use among teenagers has greatly increased without a concomitant increase cybersecurity skills in this population. Several factors, including lack of standard high school cybersecurity curricula, and lack of cybersecurity awareness among teens, have contributed to teenagers becoming targets of cybercrimes such as cyberbullying. This research aims to leverage the increased technology use of teens to (a) develop a security mindset at the high school level, (b) spread awareness of the risks and threats associated with use of smartphone/tablets and other tech, and (c) inculcate interest in cybersecurity careers (with a long-term goal of addressing the national shortage of cybersecurity workforce). The project seeks to achieve these goals by providing cybersecurity training through interactive, animated visualizations so that students develop an interest in cybersecurity careers. Educators will have access to the educational materials developed which may lead to the better assessment of students' cybersecurity skills. This new interactive animated visualization framework for high school cybersecurity education has the potential for wider, nationwide adoption. As cybersecurity continues to become a national and global security threat, this research will facilitate the development of a new generation of workforce and a safer cyber-environment.The project will develop an innovative teaching plan and pedagogical methods for high school cybersecurity education. The framework will be designed and used in a summer camp setting to help students understand cybersecurity threats, defense, and prevention mechanisms. Open-source smartphone app development tools will be integrated into the curriculum to determine if the framework aids teens in understanding the cybersecurity risks. A series of research questions will investigate the extent to which the "new" curriculum promotes a better understanding of cybersecurity. The effectiveness and rigor of this curriculum will be measured in several ways, including (a) using a task load index to quantify rigor, (b) administering surveys to gain insight about students' motivation and perceptions of cybersecurity, and (c) analyzing students' learning using analytical course rubrics. Deliverables of this project will involve (a) interactive animated visualization based cybersecurity tutorials for summer camp mode delivery to high school students, (b) availability of all tutorials for accessibility to other educators, and (c) publications and meeting presentations to share project outcomes more widely.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

青少年的技术使用量大幅增加，但该人群的网络安全技能却没有相应提高。缺乏标准的高中网络安全课程以及青少年缺乏网络安全意识等多种因素导致青少年成为网络欺凌等网络犯罪的目标。这项研究旨在利用青少年日益增加的技术使用来 (a) 在高中阶段培养安全心态，(b) 传播对与使用智能手机/平板电脑和其他技术相关的风险和威胁的认识，以及 (c)灌输对网络安全职业的兴趣（长期目标是解决全国网络安全劳动力短缺的问题）。该项目旨在通过交互式动画可视化提供网络安全培训，从而培养学生对网络安全职业的兴趣，从而实现这些目标。教育工作者将可以获得开发的教育材料，这可能有助于更好地评估学生的网络安全技能。这种用于高中网络安全教育的新型交互式动画可视化框架有可能在全国范围内得到更广泛的采用。随着网络安全继续成为国家和全球安全威胁，这项研究将促进新一代劳动力的发展和更安全的网络环境。该项目将为高中网络安全教育制定创新的教学计划和教学方法。该框架将在夏令营环境中设计和使用，以帮助学生了解网络安全威胁、防御和预防机制。开源智能手机应用程序开发工具将被整合到课程中，以确定该框架是否有助于青少年了解网络安全风险。一系列研究问题将调查“新”课程在多大程度上促进人们更好地理解网络安全。该课程的有效性和严谨性将通过多种方式来衡量，包括（a）使用任务负载指数来量化严谨性，（b）进行调查以深入了解学生的动机和对网络安全的看法，以及（c）分析学生' 使用分析课程标准进行学习。该项目的交付成果将包括（a）基于交互式动画可视化的网络安全教程，以夏令营模式向高中生提供，（b）向其他教育工作者提供所有教程，以及（c）出版物和会议演示文稿以分享项目成果该奖项反映了 NSF 的法定使命，并通过使用基金会的智力价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

An Introductory Visualization Aid for Cybersecurity Education

网络安全教育的可视化入门辅助工具

• 发表时间: 2019-07
• 期刊: (FECS 19
• 作者: Aguayo; Gabriel Castro
• 通讯作者: Gabriel Castro

Permission-Educator: App for Educating Users About Android Permissions

Permission-Educator：用于对用户进行 Android 权限教育的应用程序

• DOI: 10.1007/978-3-030-98404-5_34
• 发表时间: 2022-03
• 期刊: Cham
• 作者: Mathur, Akshay;Ewoldt, Ethan;Niyaz, Quamar;Javaid, Ahmad;Yang, Xiaoli
• 通讯作者: Yang, Xiaoli

Practice-Oriented Smartphone Security Exercises for Developing Cybersecurity Mindset in High School Students

以实践为导向的智能手机安全练习，培养高中生的网络安全心态

• DOI: 10.1109/tale48869.2020.9368440
• 发表时间: 2020-12
• 期刊: and Learning for Engineering (TALE
• 作者: Podila, Laxmi M.;Bandreddi, Jyothi P.;Campos, Javier I.;Niyaz, Quamar;Yang, Xiaoli;Trekles, Anastasia;Czerniak, Charlene;Javaid, Ahmad Y.
• 通讯作者: Javaid, Ahmad Y.