Cybersecurity professionals need hands-on training to prepare for managing the current advanced cyber threats. To practice cybersecurity skills, training participants use numerous software tools in computer-supported interactive learning environments to perform offensive or defensive actions. The interaction involves typing commands, communicating over the network, and engaging with the training environment. The training artifacts (data resulting from this interaction) can be highly beneficial in educational research. For example, in cybersecurity education, they provide insights into the trainees' learning processes and support effective learning interventions. However, this research area is not yet well-understood. Therefore, this paper surveys publications that enhance cybersecurity education by leveraging trainee-generated data from interactive learning environments. We identified and examined 3021 papers, ultimately selecting 35 articles for a detailed review. First, we investigated which data are employed in which areas of cybersecurity training, how, and why. Second, we examined the applications and impact of research in this area, and third, we explored the community of researchers. Our contribution is a systematic literature review of relevant papers and their categorization according to the collected data, analysis methods, and application contexts. These results provide researchers, developers, and educators with an original perspective on this emerging topic. To motivate further research, we identify trends and gaps, propose ideas for future work, and present practical recommendations. Overall, this paper provides in-depth insight into the recently growing research on collecting and analyzing data from hands-on training in security contexts.
翻译:网络安全专业人员需要通过实践培训为应对当前高级网络威胁做好准备。为练习网络安全技能,培训参与者在计算机支持的交互式学习环境中使用大量软件工具执行攻击或防御操作。这种交互涉及键入命令、通过网络通信以及与培训环境互动。这些培训产物(互动产生的数据)对教育研究具有重要价值。例如,在网络安全教育中,它们能揭示学员的学习过程并支持有效的学习干预。然而,这一研究领域尚未得到充分理解。为此,本文通过系统调研利用交互式学习环境中学员生成数据增强网络安全教育的相关文献,识别并审查了3021篇论文,最终筛选出35篇进行详细分析。首先,我们探究了哪些数据被用于网络安全培训的哪些领域、如何应用及原因;其次,分析了该领域研究的应用与影响;最后,探索了研究群体。我们通过系统文献综述对所涉论文进行分类,依据数据采集方式、分析方法及应用场景。这些成果为研究人员、开发者和教育工作者提供了这一新兴主题的独特视角。为激励后续研究,我们识别了趋势与空白,提出未来工作设想及实践建议。总体而言,本文深入剖析了近年来在安全场景中基于实践培训数据采集与分析的研究增长态势。