Culturally-sensitive Cybersecurity Awareness Program Design for Iranian High-school Students

Karimnia, Rooya; Maennel, Kaie; Shahin, Mahtab

doi:10.5220/0010824800003120

Cited by 5 publications

(4 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Because cultural aspects play a vital role in the East in general and in AGCs specifically [21], these aspects should be incorporated into the ethics topic for students to gain awareness. This can be applied by teaching students about professional responsibilities and cybersecurity regulations that are applicable at the national level, such as KSA Data Management and Personal Data Protection Standards 7 in Saudi Arabia.…”

Section: Ethicsmentioning

confidence: 99%

“…In an education context, ethical considerations will let students understand how to make decisions about the commercial activity of a software business, such as vendor support, licensing, upgrading, pricing; outsourcing; and updating software releases [7]. Because cultural aspects play a vital role in the East in general and in AGCs specifically [21], these aspects should be incorporated into the ethics topic for students to gain awareness. This can be applied by teaching students about professional responsibilities and cybersecurity regulations that are applicable at the national level, such as KSA Data Management and Personal Data Protection Standards in Saudi Arabia.…”

Section: Observations and Recommendations (Rq3)mentioning

confidence: 99%

“…The framework improved students' skills and awareness of source code vulnerabilities, detection tools, and mitigation techniques. Karimnia et al [21] developed an awareness program for 16 to 18-year-old Iranian students using a culturally sensitive model. The findings showed low cyber hygiene knowledge, excessive VPN use, and that lectures were a preferred learning approach.…”

Section: Introductionmentioning

confidence: 99%

“…Some researchers discussed the integration of software security with other courses [17,37]. Others investigated the impact of teaching software security on the student's level through a MOOC-based course [33] or the effect of culture on cybersecurity training programs [21]. To the best of our knowledge, no study has focused on the topics or contents of software security courses to discover the topics or essentials that should or should not be included in the courses.…”

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

What topics should or should not be included in software security education—Qualitative content analysis

Ebad

2022

Comp Applic In Engineering

View full text Add to dashboard Cite

Software security education is still not preparing students for the types of high‐skilled technical roles that represent the most severe workforce shortage. Recognizing this, academia has begun redefining the knowledge area concepts of software security curricula to meet the current workforce shortage. This article studies the software security courses in Arab Gulf academic programs and benchmarks their descriptions with the corresponding knowledge area from cybersecurity Curricula (CSEC). 2017, the first set of global cybersecurity curricular guidelines. Using content analysis, six concepts or essentials are investigated: security requirements, secure design principles, secure source code, analysis and testing, patch, and ethics. It was found that no course follows all the CSEC. 2017 essentials. The analysis and testing essential were considered by all courses, and security after deployment, including the patch essential, needs more attention because it was not included in any course. Similarly, the security requirements and ethics essentials were also considered by a few courses. However, software success depends on requirements, and ethics has become critical in the cybersecurity and information assurance fields that depend on law and forensics. The secure source code essential was covered by most courses. The well‐known types of code attacks were covered, and over half of the courses discussed secure design principles essential. However, security by design is an emerging development philosophy. The article discussed observations and recommendations that will assist program managers and their staff in making effective decisions about the essentials and concepts that should be included when they are developing the software security curriculum.

show abstract

Section: Ethicsmentioning

confidence: 99%

Section: Observations and Recommendations (Rq3)mentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%