Collaborative Research: SaTC: EDU: Dual-track Role-based Learning for Cybersecurity Analysts and Engineers for Effective Defense Operation with Data Analytics

协作研究：SaTC：EDU：网络安全分析师和工程师基于角色的双轨学习，通过数据分析实现有效的防御操作

• 批准号: 2228002
• 负责人: David Miller
• 金额: $ 13.06万
• 依托单位: University of Rochester
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2023
• 资助国家: 美国
• 起止时间: 2023-06-15 至 2026-05-31
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2228002&HistoricalAwards=false
• 关键词: Collaborative; Research; SaTC; EDU; Dual

Cybersecurity defense operations (cyber-ops) are in dire need of effective and expedited learning programs for practicing professionals to infuse data analytics (i.e., data science, artificial intelligence, and machine learning) into their day-to-day tasks. To combat the evolving threat landscape, effective cyber-ops often involve a team of cybersecurity analysts and engineers with complementary expertise. The analysts need effective, usable, and potentially customized data analytics, which are developed by or in collaboration with the engineers. Currently, in-service training for cybersecurity analysts and engineers who need to use data analytics for cyber-ops are limited. No existing program addresses the need to develop the collaborative mindsets and practices that are necessary to work effectively together. This project aims to develop an innovative dual-track learning program for working cybersecurity analysts and engineers that leverages role-playing within a simulated organization and involves tasks that are specific to each group as well as tasks where they need to work together as a team. This innovative design will help promote collaboration while also enhancing learning of specific data analytic knowledge and skills needed by each type of professional in a realistic work environment. The program features a combination of remote learning modules and tasks, team coach sessions, and team-based incident response exercises. Progressively deeper learning about data analytics will occur as the scale and complexity of the cyber-op tasks assigned to the participants, as members of a simulated organization, are gradually increased. The program was designed in collaboration with education researchers. The design is informed by education theories and principles, including Identity Theory, Project-based Design, Understanding by Design, and Universal Design for Learning. The program’s design will also build on prior successful experiences with entry-level cybersecurity bootcamps employing simulations, cybersecurity competitions, and teaching and deployment of research advances for cyber-ops. The program will be refined through three iterations following a Design-based Research approach, and its effects evaluated by an external evaluation team.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

网络安全防御行动（网络行动）迫切需要有效且快速的学习计划，让执业专业人员将数据分析（即数据科学、人工智能和机器学习）融入到他们的日常任务中。随着威胁形势的不断变化，有效的网络行动通常需要一支由具有互补专业知识的网络安全分析师和工程师组成的团队，这些分析师需要由工程师开发或与工程师合作进行有效、可用且可能定制的数据分析。培训需要使用数据分析进行网络操作的网络安全分析师和工程师没有能力满足培养有效合作所需的协作思维和实践的需要。该项目旨在开发创新的双轨学习计划。适合在职的网络安全分析师和工程师，在模拟组织中利用角色扮演，涉及每个小组特定的任务以及需要团队合作的任务。这种创新设计将有助于促进协作，同时增强学习能力。各类专业人员所需的具体数据分析知识和技能该计划结合了远程学习模块和任务、团队教练课程以及基于团队的事件响应练习，随着分配的网络作战任务的规模和复杂性，将逐步深入地学习数据分析。作为模拟组织的成员，该项目是与教育研究人员合作设计的。该设计以教育理论和原则为基础，包括身份理论、基于项目的设计、设计理解和通用性。该计划的设计也将建立在先前的成功经验之上。初级网络安全训练营采用模拟、网络安全竞赛以及网络行动研究进展的教学和部署。该计划将按照基于设计的研究方法进行三次迭代，并由外部评估团队评估其效果。该奖项反映了 NSF 的法定使命，并通过使用基金会的智力价值和更广泛的影响审查标准进行评估，被认为值得支持。