Cyber has evolved in the Information Age to penetrate and threaten all aspects of society. Arguably, undergraduate education needs to prepare graduates for cyber security as it does in communication and logic. Yet, most universities are so far only including cyber security as a new discipline. One university in 2015 made cyber security a general education subject. This research reports that the university’s first major curricular and pedagogical re - form for the general cyber security subject to be more realisable and appreciated by students. It also exemplifies the importance of well-designed laboratories for student appreciation and understanding within this new field and thus within educational research.
KeywordsUndergraduate General EducationCyber SecurityReinforcement Laboratory LearningCurriculum ReformContextualisation
Association for Computing Machinery (2017). Cyber Security Curricula 2017, Curriculum Guidelines for Post-Secondary Degree Programs in Cyber Security. https://europe.acm.org/binaries/content/assets/education/curricula-recommendations/csec2017.pdf
Austin, G. (2016). Australia Rearmed! Future Needs for CyberEnabled Warfare. Sydney: Australian Center for Cyber Security, University of New South Wales. https://www.unsw.adfa.edu.au/unsw-canberra-cyber/sites/accs/files/uploads/ DISCUSSION%20PAPER%20AUSTRALIA%20REARMED.pdf
Austin, G. (2019). Civil Defence Gaps under Cyber Blitzkrieg. International Conference, Research and Education for the Cyber Storm, Canberra. https://www.unsw.adfa.edu.au/unsw-canberracyber/sites/accs/files/uploads/ Cyber%20blitzkrieg%207%20Feb%202019%20CONF%20VERSION.pdf
Austin, G. (2021). Ch. 13: Twelve Dilemmas of Reform. In G. Austin (Ed.), Cyber Security Education: Principles and Policies (pp. 208-219). London: Taylor & Francis. https://doi.org/10.4324/9780367822576-13
Australian Computing Academy (2019). Australian First: Cyber Security to Be Taught in Classrooms from 2019: Education, Banking and Technology Sectors Collaborate to Deliver Critical Cyber Security Skills to Students. https://news.nab.com.au/news_room_posts/australian-first-cyber-security-to-be-taught-in-classrooms-from-2019
Australian Signals Directorate (2019). Australian Government Information Security Manual. https://www.cyber.gov.au/ism
Bishop, M. (2018). A Design for a Collaborative Make-the-Flag Exercise: IFIP Advances in Information and Communication Technology. IFIP World Conference on Information Security Education (WISE): Towards a Cybersecure Society. https://doi.org/10.1007/978-3-319-99734-6_1
Bloom, B. S. (1956). Taxonomy of Educational Objectives, Handbook I: The Cognitive Domain. Philadelphia, PA: David McKay Co. Inc.
Caelli, W. J. (2021). Ch 1: History and Philosophy of Cyber Security Education. In G. Austin (Ed.), Cyber Security Education: Principles and Policies (pp. 8-28). London: Taylor & Francis. https://doi.org/10.4324/9780367822576-1
Caldwell, T. (2013). Plugging the Cyber-Security Skills Gap. Computer Fraud & Security, 2013, 5-10. https://doi.org/10.1016/S1361-3723(13)70062-9
CGE Risk Solutions Ltd. (2019). How to Deal with Generic Threats like Cyber Attacks? BowTieXP Allows You to Understand and Manage Your Risks through Barrier Based Risk Management. https://www.cgerisk.com/solutions/cyber-security
Chan, S. (2018). Prototype Orchestration Framework as a High Exposure Dimension Cyber Defense Accelerant amidst Ever-Increasing Cycles of Adaptation by Attackers: A Modified Deep Belief Network Accelerated by a Stacked Generative Adversarial Network for Enhanced Event Correlation. In: CYBER 2018: The Third International Conference on Cyber-Technologies and Cyber-Systems (pp. 28-38). Athens: IARIA.
Chen, X., Zou, D., Cheng, G., & Xie, H. (2020). Detecting Latent Topics and Trends in Educational Technologies over Four Decades Using Structural Topic Modeling: A Retrospective of All Volumes of Computer & Education. Computers & Education, 151, Article ID: 103855. https://doi.org/10.1016/j.compedu.2020.103855
Christensen, P. (2017). Cybersecurity Test and Evaluation: A Look Back, Some Lessons Learned, and a Look Forward! ITEA Journal, 38, 221-228.
First.org (2019). Common Vulnerability Scoring System (CVSS-SIG). https://www.first.org/cvss
Forero, C. A. M. (2016). Tabletop Exercise for Cybersecurity Educational Training; Theoretical Grounding and Development. MS Thesis, Tartu: University of Tartu. https://www.academia.edu/34091273/Tabletop_Exercise_For_Cybersecurity_ Educational_Training_Theoretical_Grounding_And_Development
Fowler, S., & Sitnikova, E. (2019). Toward a Framework for Assessing the Cyber-Wor- thiness of Complex Mission Critical Systems. Military Communications and Information Systems Conference (MilCIS), Canberra, 1-6. https://doi.org/10.1109/MilCIS.2019.8930800
Gestwicki, P., & Stumbaugh, K. (2015). Observations and Opportunities in Cybersecurity Education Game Design. 2015 Computer Games: AI, Animation, Mobile, Multimedia, Educational and Serious Games (CGAMES), Louisville, 27-29 July 2015, 131-137. https://doi.org/10.1109/CGames.2015.7272970
Grance, T., Nolan, T., Burke, K., Dudley, R., White, G., & Good, T. (2006). Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities. Special Publication 800- 84. https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-84.pdf https://doi.org/10.6028/NIST.SP.800-84
Hall, A. O., & Sobiesk, E. (2017). Integration of the Cyber Domain at the United States Military Academy. Proceedings of the International Workshops Realigning Cybersecurity Education, Melbourne, 24 November 2017, Vol. 10, Article No. 3293881.3295778.
Hanson, F., & Uren, T. (2018). Australia’s Offensive Cyber Capability. Canberra: Australian Strategic Policy Institute. https://www.aspi.org.au/report/australias-offensive-cyber-capability
Henry, A. P. (2017). Mastering the Cyber Security Skills Crisis: Realigning Educational Outcomes to Industry Requirements. Discussion Paper. https://www.unsw.adfa.edu.au/australian-centre-for-cyber-security/sites/accs/files/uploads/ACCS-Discussion-Paper-4-Web.pdf
Ikeda, K., Marshall, A., & Zaharchuk, D. (2019). Agility, Skills and Cybersecurity: Critical Drivers of Competitiveness in Times of Economic Uncertainty. Strategy & Leadership, 47, 40-48. https://doi.org/10.1108/SL-02-2019-0032
Kello, L. (2018). Cyber Threats. In T. G. Weiss, & S. Daws (Eds.), The Oxford Handbook on the United Nations (2nd ed.). Oxford: Oxford University Press.
Krathwohl, D. R. (2002). A Revision of Bloom’s Taxonomy: An Overview. Theory into Practice, 41, 212-218. https://doi.org/10.1207/s15430421tip4104_2
Kretchman-Grande, J. (2018). Re-Assessing Assessment: Implementing Constructivist Tes- ting with New and Existing Curriculum (p. 224). School of Education Student Capstone Projects. https://digitalcommons.hamline.edu/hse_cp/224
Kumar, A., & Shah, J. (2014). The Threat of Advancing Cyber Crimes in Organisations: Awareness and Preventions. International Journal of Advanced Research in Computer Science, 5, 85-89. http://search.proquest.com/docview/1658427294/?pq-origsite=primo
Lantto, H., Akesson, B., Suojanen, M., Tuukkanen, T., Huopio, S., Nikkarila, J., & Ristolainen, M. (2019). Wargaming the Cyber Resilience of Structurally and Technologically Different Networks. Security and Defence Quarterly, 24, 51-64. https://doi.org/10.35467/sdq/103346
Littlewood, W. (1996). “Autonomy”: An Anatomy and a Framework. System (Linkoping), 24, 427-435. https://doi.org/10.1016/S0346-251X(96)00039-5
Martin, A., & Collier, J. (2021). Ch 3: Beyond Awareness: Reflections on Meeting the Inter-Disciplinary Cyber Skills Demand. In G. Austin (Ed.), Cyber Security Education: Principles and Policies (pp. 55-73). London: Taylor & Francis. https://doi.org/10.4324/9780367822576-3
Mell, P., Scarfone, K., & Romanosky, S. (2006). Common Vulnerability Scoring System. IEEE Security and Privacy Magazine, 4, 85-89. https://doi.org/10.1109/MSP.2006.145
Mirkovic, J., Benzel, T. V., Faber, T., Braden, R., Wroclawski, J. T., & Schwab, S. (2010). The DETER Project: Advancing the Science of Cyber Security Experimentation and Test. 2010 IEEE International Conference on Technologies for Homeland Security, Waltham, 8-10 November 2010, 1-7. https://doi.org/10.1109/THS.2010.5655108
Mouheb, D., Abbas, S., & Merabti, M. (2019). Cybersecurity Curriculum Design: A Survey. In Z. Pan, A. D. Cheok, W. Müller, M. Zhang, A. El Rhalibi, & K. Kifayat (Eds.), Transactions on Edutainment XV (pp. 93-107). Berlin: Springer. https://doi.org/10.1007/978-3-662-59351-6_9
Newhouse, W., Keith, S., Scribner, B., & Witte, G. (2017). National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework. NIST Special Publication, 800, 181.
Newman, M. E. (2005). Power Laws, Pareto Distributions and Zipf’s Law. Contemporary physics, 46, 323-351. https://doi.org/10.1080/00107510500052444
Nickerson, J. V., Corter, J. E., Esche, S. K., & Chassapis, C. (2007). A Model for Evaluating the Effectiveness of Remote Engineering Laboratories and Simulations in Education. Computers & Education, 49, 708-725. https://doi.org/10.1016/j.compedu.2005.11.019
OzBargain (2019). Free Course: Introduction to Cybersecurity from University of Newcastle. OzBargain. https://www.ozbargain.com.au/node/434515
Preston, C. J. (2018). The Synthetic Age: Out-Designing Evolution, Resurrecting Species, and Reengineering Our World. Cambridge, MA: MIT Press. https://doi.org/10.7551/mitpress/11466.001.0001
Raineri, E., & Fudge, T. (2019). Exploring the Sufficiency of Undergraduate Students’ Cybersecurity Knowledge within Top Universities’ Entrepreneurship Programs. Journal of Higher Education Theory and Practice, 19, 73-92. http://search.proquest.com/docview/2291990014 https://doi.org/10.33423/jhetp.v19i4.2203
Reay-Atkinson, S., Smallhorn, C., Caldwell, N. H. M., & Tolhurst, G. (2016). Identification and Classification—Designing and Engineering Synthetic Ecologies. System Engineering, Test & Evaluation (SETE) Conference, Melbourne, 128-142.
Slocombe, G. (2018). Cyber Security: Australian Signals Directorate (ASD) Is in the Defensive and Offensive Front-Line. Asia-Pacific Defence Reporter, 44, 34-36. https://asiapacificdefencereporter.com/australian-signals-directorate-asd-is-in-the-defensive-and-offensive-front-line
Springer, L., Stanne, M. E., & Donovan, S. S. (1999). Effects of Small-Group Learning on Undergraduates in Science, Mathematics, Engineering, and Technology: A Meta-Ana- lysis. Review of Educational Research, 69, 21-51. https://doi.org/10.3102/00346543069001021
Tekkumru-Kisa, M., Stein, M. K., & Schunn, C. (2015). A Framework for Analysing Cognitive Demand and Content-Practices Integration: Task Analysis Guide in Science. Journal of Research in Science Teaching, 52, 659-685. https://doi.org/10.1002/tea.21208
Udvari-Solner, A., & Thousand, J. S. (1996). Creating a Responsive Curriculum for Inclusive Schools. Remedial and Special Education, 17, 182-192. https://doi.org/10.1177/074193259601700307
United States Government Accountability Office (2018). Weapon Systems Cybersecurity: DOD Just Beginning to Grapple with Scale of Vulnerabilities. https://www.gao.gov/products/GAO-19-128
Vygotsky, L. S. (1978). Mind in Society: The Development of Higher Psychological Pro- cesses. Cambridge, MA: Harvard University Press.
Weiser, M., & Conn, C. (2017). Into the Breach: Integrating Cybersecurity into the Business Curriculum. BizEd, 16, 36-41.
Yan, Z., Robertson, T., Yan, R., Park, S. Y., Bordoff, S., Chen, Q., & Sprissler, E. (2018). Finding the Weakest Links in the Weakest Link: How Well Do Undergraduate Students Make Cybersecurity Judgment? Computers in Human Behavior, 84, 375-382. https://doi.org/10.1016/j.chb.2018.02.019
Zhou, W., Jia, Y., Peng, A., Zhang, Y., & Liu, P. (2019). The Effect of IoT New Features on Security and Privacy: New Threats, Existing Solutions, and Challenges Yet to Be Solved. IEEE Internet of Things Journal, 6, 1606-1616. https://doi.org/10.1109/JIOT.2018.2847733