As cyber threats endanger everyone, from regular users to computing professionals, spreading cybersecurity awareness becomes increasingly critical. Therefore, our university designed an innovative cybersecurity awareness course that is freely available online for students, employees, and the general public. The course offers simple, actionable steps that anyone can use to implement defensive countermeasures. Compared to other resources, the course not only suggests learners what to do, but explains why and how to do it. To measure the course impact, we administered it to 138 computer science undergraduates within a compulsory information security and cryptography course. They completed the course as a part of their homework and filled out a questionnaire after each lesson. Analysis of the questionnaire responses revealed that the students valued the course highly. They reported new learning, perspective changes, and transfer to practice. Moreover, they suggested suitable improvements to the course. Based on the results, we have distilled specific insights to help security educators design similar courses. Lessons learned from this study are relevant for cybersecurity instructors, course designers, and educational managers.
翻译:随着网络威胁危及从普通用户到计算专业人员的每一个人,传播网络安全意识变得日益关键。为此,我们大学设计了一门创新的网络安全意识课程,该课程免费在线开放,面向学生、员工及公众。课程提供简单、可操作的步骤,任何人都能利用这些步骤实施防御措施。与其他资源相比,该课程不仅建议学习者“做什么”,还解释“为什么”以及“如何做”。为衡量课程效果,我们在一门必修的信息安全与密码学课程中,对138名计算机科学本科生实施了该课程。他们将此课程作为作业的一部分完成,并在每节课后填写问卷。对问卷回复的分析显示,学生高度评价该课程。他们报告了新知学习、视角转变及实践转化。此外,他们还提出了适当的改进建议。基于这些结果,我们提炼出具体见解,以帮助安全教育者设计类似课程。本研究所得经验对网络安全讲师、课程设计者及教育管理者具有参考价值。