Learning Outcomes for Cyber Defense Competitions

Cyber defense competitions (CDCs) simulate a real-world environment where the competitors must protect the information assets of a fictional organization. These competitions are becoming popular at the high school and college levels, as well as in industry and governmental settings. However, there is little research to date on the learning outcomes associated with CDCs or the longterm benefits to the participants as they pursue future educational, employment, or military goals. For this exploratory research project, we surveyed 11 judges and mentors participating in a well-established high school CDC held in the southeastern United States. Then, we developed a set of recommended learning outcomes for CDCs, based on importance of the topic and participant preparedness for future information-security related endeavors. While most previous research has focused on technology issues, we analyzed technological, human, and social topics to develop a comprehensive set of recommendations for future CDCs.

[1]  Albert L. Harris,et al.  Incorporating Ethics and Social Responsibility in IS Education , 2011, J. Inf. Syst. Educ..

[2]  Marco Ghiglieri,et al.  SecLab: An Innovative Approach to Learn and Understand Current Security and Privacy Issues , 2016, SIGITE.

[3]  Doug Jacobson,et al.  IT-Adventures: A Program to Spark IT Interest in High School Students Using Inquiry-Based Learning With Cyber Defense, Game Design, and Robotics , 2010, IEEE Transactions on Education.

[4]  John R. Crook.  White House and Department of Defense Announce Strategies to Promote Cybersecurity, Including Strengthening Norms Affecting Internet Security , 2011, American Journal of International Law.

[5]  Cameron Lawrence,et al.  Advisory from Professionals: White Hats Chasing Black Hats: Careers in IT and the Skills Required to Get There , 2013, J. Inf. Syst. Educ..

[6]  Arben Asllani,et al.  Viewing Cybersecurity as a Public Good: The Role of Governments, Businesses, and Individuals , 2013 .

[7]  Anthony Serapiglia.  The Case for Inclusion of Competitive Teams in Security Education. , 2016 .

[8]  Dave Edwards.  Robust ICSs Critical for Guarding Against Cyber Threats , 2010 .

[9]  Konstantin Beznosov,et al.  On the imbalance of the security problem space and its expected consequences , 2007, Inf. Manag. Comput. Secur..

[10]  James W. Gabberty.  Educating The Next Generation Of Computer Security Professionals: The Rise And Relevancy Of Professional Certifications , 2013, BIS 2013.

[11]  Deirdre K. Mulligan,et al.  Doctrine for Cybersecurity , 2011, Daedalus.

[12]  D. Manson,et al.  A League of Our Own: The Future of Cyber Defense Competitions , 2011 .

[13]  Dan Colesniuc.  Cyberspace and Critical Information Infrastructures , 2013 .

[14]  Stuart Hannabuss.  Being negligent and liable: a challenge for information professionals , 2000 .

[15]  Dennis F. Galletta,et al.  User Awareness of Security Countermeasures and Its Impact on Information Systems Misuse: A Deterrence Approach , 2009, Inf. Syst. Res..

[16]  Sehun Kim,et al.  Educational Requirements Analysis for Information Security Professionals in Korea , 2002, J. Inf. Syst. Educ..

[17]  Ludwig Slusky,et al.  Teaching Information Assurance Online , 2012, BIS 2012.

[18]  Brian B. Kelly.  Investing in a Centralized Cybersecurity Infrastructure: Why "Hacktivism" Can and Should Influence Cybersecurity Reform , 2012 .

[19]  Jake Zhu,et al.  Developing the Cyber Defenders of Tomorrow with Regional Collegiate Cyber Defense Competitions (CCDC). , 2010 .