Applying Puzzle-Based Learning to Cyber-Security Education

Cyber-enabled devices are becoming more and more complex with integration of new capabilities and functionalities, both in software and hardware, making it very difficult for users to realize that they are under cyber attack or the cause of data breach, etc. It is also well-known fact that vulnerabilities at one component can affect other components in any computing device. But it is hard to realize the interdependencies of various components in order to secure the entire path to in and out of a cyber system. Puzzle-based Learning approach proved to have improved learning environment including mathematics, physics and computer science, however, there is very little work has been done in computer and cyber security. We introduced the Puzzle-based Learning to basic cyber security education. We believe that such an interactive learning environment will help students to understand complex attack paths and countermeasures for fraud detection, cybercrime, and advanced persistent threats (APTs). Students can learn not only to protect a specific system but also for a class of Internet-enabled systems with different hardware/software components and architecture, providing similar services.

[1]  Davinia Hernández Leo,et al.  Towards the Support of Scaffolding in Customizable Puzzle-Based Learning Games , 2011, 2011 International Conference on Computational Science and Its Applications.

[2]  Zbigniew Michalewicz,et al.  Teaching Puzzle-based Learning: Development of Basic Concepts , 2012 .

[3]  Mehran S. Fallah A Puzzle-Based Defense Strategy Against Flooding Attacks Using Game Theory , 2010, IEEE Transactions on Dependable and Secure Computing.

[4]  Zbigniew Michalewicz,et al.  Teaching Puzzle-based Learning: Development of Transferable Skills , 2012 .

[5]  Jeannette M. Wing,et al.  A Formal Model for a System's Attack Surface , 2011, Moving Target Defense.

[6]  Chris Eagle Computer Security Competitions: Expanding Educational Outcomes , 2013, IEEE Security & Privacy.

[7]  Nickolai Zeldovich,et al.  Experiences in Cyber Security Education: The MIT Lincoln Laboratory Capture-the-Flag Exercise , 2011, CSET.

[8]  Zbigniew Michalewicz,et al.  Puzzle-Based Learning : An Introduction to Critical Thinking, Mathematics, and Problem Solving , 2014 .

[9]  Zachary N. J. Peterson,et al.  Security through play , 2013, IEEE Security & Privacy.

[10]  C. Pandu Rangan,et al.  Game Theoretic Resistance to Denial of Service Attacks Using Hidden Difficulty Puzzles , 2010, ISPEC.

[11]  Kathryn E. Merrick,et al.  An Empirical Evaluation of Puzzle-Based Learning as an Interest Approach for Teaching Introductory Computer Science , 2010, IEEE Transactions on Education.

[12]  Zbigniew Michalewicz,et al.  Puzzle-Based Learning for Engineering and Computer Science , 2010, Computer.