Advancing Human Performance in Cybersecurity, ADVANCES

• Pirta-Dreimane, Rūta; Brilingaite, A.; Roponena, Evita; Parish, Karen; Grabis, Janis & Lugo, Ricardo Gregorio [Vis alle 7 forfattere av denne artikkelen] (2023). CyberEscape Approach to Advancing Hard and Soft Skills in Cybersecurity Education. Lecture Notes in Computer Science (LNCS). ISSN 0302-9743. doi: 10.1007/978-3-031-35017-7_28. Fulltekst i vitenarkiv Vis sammendrag

  Incorporating gamification elements and innovative approaches in training and educational programs are promising for addressing cybersecurity knowledge gaps. Cybersecurity training should consider a combination of hard and soft skills to deal with the diversity of cyber incidents. Therefore, this research aims to investigate if soft skills such as communication and collaboration enhances students’ performance in practical task execution and if the CyberEscape approach promotes students engagement and self-efficacy. This paper presents a cybersecurity game CyberEscape based on the intervention mapping methodology previously defined in the research. A virtualised infrastructure simulating the business environment works as a hybrid escape room. Physical resources and prepared information materials complement the game to support the scenario and ensure student engagement. The work employs a multiple-methods research approach. Participants filled out questionnaires in the pre-event and post-execution phases. Additionally, the participants were involved in small group semistructured interviews. Results of the pilot study show a positive impact on student competence improvement and increased interest in cybersecurity.

• Maennel, Kaie; Brilingaite, A.; Bukauskas, Linas; Juozapavičius, Aušrius; Knox, Benjamin James & Lugo, Ricardo Gregorio [Vis alle 9 forfattere av denne artikkelen] (2023). A Multidimensional Cyber Defence Exercise: Emphasis on Emotional, Social and Cognitive Aspects. Sage Open. ISSN 2158-2440. doi: 10.1177/21582440231156367. Fulltekst i vitenarkiv Vis sammendrag

  Hands-on and practical learning has been key to cybersecurity education and training success. Cyber Defence Exercises (CDX) are a common approach to training, testing, and verifying technical and soft skills. However, full-scale CDX implementation is also an expensive training event. In order to advance such exercises to the next level, CDX organisers should further focus on educational, psychological and cross-domain relationships. The paper discusses and proposes a multidimensional approach for CDX that balances cognitive, emotional and social aspects critical for successful interdisciplinary learning. We share our experience incorporating knowledge from well-known psychology theories to CDX. We derive and describe seven elementary ingredients if a CDX is to meet the interdisciplinary and critical thinking needs of defensive cyberspace operations.

• Melnikovas, Aleksandras; Lugo, Ricardo Gregorio; Maennel, Kaie; Brilingaitė, Agnė; Sütterlin, Stefan & Juozapavičius, Aušrius (2023). Teaching Pentesting to Social Sciences Students Using ExperientialLearning Techniques to Improve Attitudes towards PossibleCybersecurity Careers. Proceedings of the ... European conference on information warfare and security. ISSN 2048-8602. 22(1), s. 294–302. doi: 10.34190/eccws.22.1.1145. Vis sammendrag

  Labor market analysis shows that there is a significant shortage of experienced cybersecurity professionals, and this trend is expected to continue in the future. In addition, young people who are reluctant to choose STEM subjects in school typically do not see cybersecurity as a part of their future because they believe it demands exclusive technical knowledge that is beyond their reach. We aimed to change this perception among students of the social sciences, assuming that by providing social science students with the basics of cybersecurity, it would be possible to raise their awareness and encourage them to consider this field as a potential career option. Our team has designed a concise technical course based on Kolb's model that employs experiential learning to provide students with a basic knowledge of ethical intrusion (penetration testing). During the 32-hour subject, cadet officers with no prior IT education experienced all the steps of hacking both into a remotely accessible and physically accessible computer, including initial reconnaissance, vulnerability scanning, exploitation, and privilege escalation. A hands-on practical task of breaking into a highly vulnerable remote computer allowed for the evaluation of knowledge and skills as well as the reinforcement of learning experiences. In order to assess how the students' perceptions of the cybersecurity profession have changed based on the theory of planned behavior, they were asked to provide feedback immediately after the course and one year later. The results indicate that the short, technically challenging, but practical course based on experiential learning had a significant and positive effect on participants' attitudes: they were substantially more likely to consider cybersecurity as a future career, and some of them began participating in other cybersecurity courses or activities. It is reasonable to assume, therefore, that providing similar technical courses to social science students will encourage them to pursue cybersecurity-related careers in the future.

• Pirta-Dreimane, Rūta; Brilingaitė, Agnė; Majore, Ginta; Knox, Benjamin James; Lapin, Kristina & Parish, Karen [Vis alle 8 forfattere av denne artikkelen] (2022). Application of intervention mapping in cybersecurity education design. Frontiers in Education. ISSN 2504-284X. 7. doi: 10.3389/feduc.2022.998335. Fulltekst i vitenarkiv
• Domarkiene, Ingrida; Ambrozaitytė, Laima; Bukauskas, Linas; Rančelis, Tautvydas; Sütterlin, Stefan & Knox, Benjamin James [Vis alle 11 forfattere av denne artikkelen] (2021). Cybergenomics: Application of behavioral genetics in cybersecurity. Behavioral Sciences. ISSN 2076-328X. 11:152. doi: 10.3390/bs11110152. Fulltekst i vitenarkiv

Se alle arbeider i Cristin

• Pirta-Dreimane, Rūta; Brilingaite, A.; Roponena, Evita; Parish, Karen; Grabiss, Janis & Lugo, Ricardo Gregorio [Vis alle 7 forfattere av denne artikkelen] (2023). CyberEscape Approach to Advancing Hard and Soft Skills in Cybersecurity Education.
• Lugo, Ricardo Gregorio (2022). Psychological Profiling of Cybersecurity Operators and Users.
• Pirta-Dreimane, Ruta; Brilingaitė, Agne; Roponena, Evita & Parish, Karen (2022). Multi-dimensional Cybersecurity Education Design: A Case Study.

Se alle arbeider i Cristin