Collaborative Research: Building A Cybersecurity Mindset Through Continuous Cross-module Learning

Author(s):
Jiawei Yuan
Associate Professor
University of Massachusetts Dartmouth

Needs: In recent years, there has been a notable surge in the demand for cybersecurity professionals. However, meeting this demand goes beyond merely training specialized cybersecurity students. It is paramount to cultivate a cybersecurity mindset among computer science students at large, as they are poised to constitute the primary cybersecurity-related workforce in the foreseeable future. This project aims to promote cybersecurity education for undergraduate computer science students in general and prepare a future cybersecurity workforce. Guiding Questions: This project aims to answer the following questions: (1) How can non-cybersecurity computer science courses be optimally utilized to consistently imbue security concepts and skills in undergraduate students from the early stage of their studies? (2) What strategies can be employed to mitigate disruptions to existing computer science curricula when integrating cybersecurity modules? (3) In what ways can cybersecurity modules enrich students’ comprehension of non-security computer science courses, fostering a more holistic understanding?Outcomes: (1) The cross-module learning concept for cybersecurity mindset preparation with a mapping of appropriate computer science courses and cybersecurity modules for integration, effective integration strategies, and potential linkages among different courses and modules. (2) Cybersecurity modules with curriculum materials using the threat-driven approach. (3) A transferable laboratory framework with hands-on cybersecurity exercises for non-cybersecurity courses to support cross-module learning. The proposed framework utilizes the “build it, break it, and fix it” concept to support cross-module learning, i.e., building applications/programs based on the non-cybersecurity course’s content, breaking them by discovering and exploiting vulnerabilities and then fixing them with security practice and designs of countermeasure.Broader Impacts: This project echoes the increasing demand for a cybersecurity workforce to meet national and economic priorities. This project will directly expedite cybersecurity education for about 1,300 undergraduate students at UMass Dartmouth and CSUSM (HSI) by (1) preparing their cybersecurity mindset through continuous integration even without taking dedicated cybersecurity courses and (2) motivating their interest and study in cybersecurity. The CSIS Department of CSUSM has 43% of students from historically underrepresented minority groups. It will also benefit students at community colleges (HSI) through their 2+2 programs established with the CSIS Department CSUSM. The modularization design of curriculum materials and easy-deployment laboratory framework will also facilitate the transfer and adoption of outcomes from this project in other institutions. Outcomes from this project can be leveraged by educators, researchers, and professionals from different institutions for further development to promote the sustainable contribution and improvement of cybersecurity educational materials for the community.

Coauthors

Yanyan Li, California State University San Marcos