Winning Cybersecurity One Challenge at a Time

Gavas, Efstratios; Memon, Nasir; Britton, Douglas F.

doi:10.1109/msp.2012.112

Cited by 25 publications

(11 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Such challenges have high value since they help develop a security mindset and operate in a complementary way to existing educational approaches [8], regardless of their nature (e.g., hacking competition or military exercise) [9]. While the research streams described above are of critical importance to the development of the cyber security profession, there is a lack of research on approaches to assess competency within cyber security qualifications, particularly on how effective current practices to assess competency are.…”

Section: Related Workmentioning

confidence: 99%

“…Research strands that seek to address this topic have focused on industry professionalisation [2], competency requirements [3], [4], and the design of training programmes [5], [6], with a particular emphasis on the role of competitive events, such as Capture The Flag (CTF) competitions [7], [8], [9], [10]. One core area that has remained unaddressed, however, is a focus on the approaches to assess competency within cyber security qualifications.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

All That Glitters Is Not Gold: On the Effectiveness of Cybersecurity Qualifications

et al. 2017

View full text Add to dashboard Cite

Abstract-There has been a proliferation of industry-focused cyber security qualifications, which use different techniques to assess the competencies of cyber security professionals and certify them to employers. There is, however, a lingering question about these qualifications: do they effectively assess the competencies of cyber security professionals? 74 cyber security qualifications were analysed to determine how competency assessment is performed in practice, and five distinct techniques were identified together with the frequency of their use within qualifications. These techniques formed the basis of a large-scale survey of the perceptions of 153 industry stakeholders on the effectiveness of individual techniques and their cost-effectiveness as combinations. Despite a perceived low effectiveness of Multiple Choice Examinations, industry qualifications were found to rely on it heavily, often as a sole technique, and few qualifications utilised the cost-effective combinations identified by stakeholders.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

All That Glitters Is Not Gold: On the Effectiveness of Cybersecurity Qualifications

et al. 2017

View full text Add to dashboard Cite

show abstract

“…Our work follows the tradition of creating cybersecurity games or exercises, which are known to engage students [18,12]. This includes competitions such as CCDC 1 , Plaid 2 , notsosecure 3 , iCTF 4 [7], CSAW 5 [12], TRACER FIRE 6 , Packetwars 7 , and many others.…”

Section: Related Workmentioning

confidence: 99%

“…This includes competitions such as CCDC 1 , Plaid 2 , notsosecure 3 , iCTF 4 [7], CSAW 5 [12], TRACER FIRE 6 , Packetwars 7 , and many others. From our perspective, one problem with these competitions is that they require a significant amount of infrastructure and preparation by the organizers.…”

Section: Related Workmentioning

confidence: 99%

Teaching Cybersecurity Analysis Skills in the Cloud

Weiss

Boesen

Sullivan

et al. 2015

Proceedings of the 46th ACM Technical Symposium on Computer Science Education

View full text Add to dashboard Cite

This paper reports on the experience of using the EDURange framework, a cloud-based resource for hosting on-demand interactive cybersecurity scenarios. Our framework is designed especially for the needs of teaching faculty. The scenarios we have implemented each are designed specifically to nurture the development of analysis skills in students as a complement to both theoretical security concepts and specific software tools.Our infrastructure has two features that make it unique compared to other cybersecurity educational frameworks. First, EDURange is scalable because it is hosted on a commercial, large-scale cloud environment. Second, EDURange supplies instructors with the ability to dynamically change the parameters and characteristics of exercises so they can be replayed and adapted to multiple classes. Our framework has been used successfully in classes and workshops for students and faculty. We present our experiences building the system, testing it, and using feedback from surveys to improve the system and boost user interest.

show abstract

“…Indeed, cybersecurity competitions are an area of high interest since competitions are increasingly used to recruit and educate students [8] [11] [15]. Many efforts are underway to expand cyber competitions in both scope and availability [17] [19].…”

Section: Introductionmentioning

confidence: 99%

Does Competitor Grade Level Influence Perception of Cybersecurity Competition Design Gender Inclusiveness?

Pittman

2015

Proceedings of the 2015 ACM SIGMIS Conference on Computers and People Research

View full text Add to dashboard Cite

Lack of gender diversity is a recognized issue within STEM. As a result, much effort has been invested in alternative means of recruitment and education. One example are cybersecurity competitions serving as popular training mechanisms. Yet, earlier research found that competitors perceive these competitions to be designed in a non-gender inclusive manner. The prior work did not consider potential biases in competitors however. Motivationally, future competition design may be misguided if competitors' perceptions were skewed due to exposure and social desirability. This led to the general question of whether grade level is related to identification of such competitions as nongender inclusive in design. Accordingly, this study measured if U.S. collegiate upperclassmen and underclassmen participating in competitions are equally likely to identify cybersecurity competitions as non-gender inclusive. To that end, a chi-square statistic was used to compare the rates of identification of competition design gender inclusiveness amongst 104 cyber competitors. The results of the analysis indicated that upperclassmen are no more likely than underclassmen to identify a cybersecurity competition as non-gender inclusive. Thus, gender non-inclusiveness of competitions may be inherent in the design of such as opposed to a subjective experience of competitors.

show abstract

Winning Cybersecurity One Challenge at a Time

Cited by 25 publications

References 3 publications

All That Glitters Is Not Gold: On the Effectiveness of Cybersecurity Qualifications

All That Glitters Is Not Gold: On the Effectiveness of Cybersecurity Qualifications

Teaching Cybersecurity Analysis Skills in the Cloud

Does Competitor Grade Level Influence Perception of Cybersecurity Competition Design Gender Inclusiveness?

Contact Info

Product

Resources

About