Pedagogical Aspects of Cyber Security Exercises

Karjalainen, Mika; Kokkonen, Tero; Puuska, Samir

doi:10.1109/eurospw.2019.00018

Cited by 28 publications

(26 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Learning analytics should be incorporated to the CSXs' identifying, planning, conducting and evaluating phases (as described by [11]) and be seen as an integral part of the exercise design in line with the overall pedagogical approach selected [12]. When starting to implement a LA approach into an exercise it is useful to think about LA process from aspects of What (Data, Environments, Context), Why (Objectives), Who (Stakeholders) and How (Methods) [13].…”

Section: Reference Model For La In Csxsmentioning

confidence: 99%

Learning Analytics Perspective: Evidencing Learning from Digital Datasets in Cybersecurity Exercises

Maennel

2020

2020 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW)

View full text Add to dashboard Cite

Cybersecurity exercises are gaining in popularity in university curricula and professional training paths and are seen as an effective teaching method. Such exercises provide digital datasets to facilitate a learning analytics approach such as by using the traces that learners leave behind to improve the learning process and environment. While there are various learning measurement efforts from digital datasets in the existing literature, a holistic learning analytics approach incorporated into cybersecurity exercises is still lacking. We propose a practical reference model for incorporating a learning analytics approach into the cybersecurity exercise life-cycle. To facilitate this application, we have performed an extensive review of existing academic research on applying learning analytics in the context of cybersecurity exercises. We specifically focus on the learning indicators used to measure empirical impact and training effectiveness that could indicate achievement of defined learning outcomes. This reference model and overview of existing learning analytics use cases and learning metrics in various types of exercises can help educators, organisers and cyber range developers. This results in more adaptive exercise design and measurement using evidencebased data and connects digital learning traces to skills and competencies.

show abstract

Section: Reference Model For La In Csxsmentioning

confidence: 99%

Learning Analytics Perspective: Evidencing Learning from Digital Datasets in Cybersecurity Exercises

Maennel

2020

2020 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW)

View full text Add to dashboard Cite

show abstract

“…Cyber Arena shall be able to provide authentic activities with real-life scenarios. The pedagogical goals of the exercise must be taken into account at all stages of the exercise [31]. In order to accomplish this, the Cyber Arena shall have exercise planning, execution, monitoring and analysing capabilities and tools.…”

Section: Internet Simulation Cyber Arena Shall Simulate Globalmentioning

confidence: 99%

Comprehensive Cyber Arena; The Next Generation Cyber Range

Karjalainen

Kokkonen

2020

2020 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW)

Self Cite

View full text Add to dashboard Cite

The cyber domain and all the interdependencies between networked systems form an extremely complex ensemble. Incidents in the cyber domain may have an abundance effect on the physical domain. For example, a cyber attack or an intrusion against an electricity system may affect the performance of healthcare system as well. For organisation s cyber resilience, know-how is the key resource. Cyber security training and exercises have an extremely important role for achieving the required level of know-how in the cyber domain. The old military based-proverb You Fight Like You Train is relevant in the cyber domain. Traditionally, the platform for cyber security training and exercises is called cyber range. Because of the accelerating digitalisation and more complex totality of the cyber domain, also the infrastructure for the cyber security training and exercises is required to be more and more complex. In this paper, the concept of cyber arena, next generation cyber range, is discussed.

show abstract

“…This research is an extension of work originally presented in 2019 workshop on Cyber Range Technologies and Applications (CACOE 2019) organized in conjunction with 2019 IEEE European Symposium on Security and Privacy (EuroS&P 2019) [1]. This research is expanded from the original as follows: discussion about pedagogical theories and cyber-arena concept for complex environment simulation with the more detailed extended analysis of pedagogical aspects of the cyber security exercises and assessment of the exercise target audience.…”

Section: Introductionmentioning

confidence: 99%

Review of Pedagogical Principles of Cyber Security Exercises

Karjalainen¹,

Kokkonen²

2020

Adv. sci. technol. eng. syst. j.

Self Cite

View full text Add to dashboard Cite

Modern digitalized cyber domains are extremely complex ensemble. Cyber attacks or incidents against system may affect capricious effects for another system or even for physical devices. For understanding and training to encounter those effects requires an effective and complex simulation capability. Cyber Security Exercises are an effective expedient for training and learning measures and operations with their outcomes in that complex cyber domain. Learning in cyber security exercises is relevant for different level actors in organisation hierarchy. Technical experts are able to train the technical capabilities whereas decision makers are able to train the decision-making capabilities under hectic cyber incident. In this paper, the pedagogical aspects of cyber security exercises are discussed in accordance with the law of the lifecycle of the cyber security exercise: planning phase, implementation phase, and feedback phase.

show abstract

Pedagogical Aspects of Cyber Security Exercises

Cited by 28 publications

References 12 publications

Learning Analytics Perspective: Evidencing Learning from Digital Datasets in Cybersecurity Exercises

Learning Analytics Perspective: Evidencing Learning from Digital Datasets in Cybersecurity Exercises

Comprehensive Cyber Arena; The Next Generation Cyber Range

Review of Pedagogical Principles of Cyber Security Exercises

Contact Info

Product

Resources

About