论文标题
通过自适应学习加强网络安全动手培训
Reinforcing Cybersecurity Hands-on Training With Adaptive Learning
论文作者
论文摘要
本文介绍了学习经验如何影响学生学习能力及其学习动机。尽管每个学生都是不同的,但标准指导方法并不适应个人。自适应学习扭转了这种做法,并试图改善学生的体验。尽管自适应学习在编程方面已经建立了良好,但它很少用于网络安全教育。本文是调查安全培训中自适应学习的首批作品之一。首先,我们分析了12个培训课程中95名学生的表现,以了解当前培训实践的局限性。不到一半的学生在没有显示解决方案的情况下完成了培训,只有在两个课程中,所有学生都完成了所有阶段。然后,我们模拟学生在过去的一次培训课程中将如何进行各种困难的途径。基于此模拟,我们提出了一种新型的自适应培训指导模型,该模型考虑了学生在正在进行的培训期间和期间的熟练程度。使用预训练问卷和各种训练指标评估熟练程度。最后,我们使用拟议的导师模型和自适应培训形式对24名学生和新培训进行了一项研究。结果表明,自适应培训并不能使学生成为原始的静态培训。自适应培训使学生能够以比原始培训更低的难度进入几个替代培训阶段。拟议的格式不仅限于特定的培训。因此,它可以应用于练习任何安全主题,甚至在相关领域,例如网络或操作系统。我们的研究表明,自适应学习是改善学生在安全教育方面的经验的有前途的方法。我们还强调了对教育实践的影响。
This paper presents how learning experience influences students' capability to learn and their motivation for learning. Although each student is different, standard instruction methods do not adapt to individuals. Adaptive learning reverses this practice and attempts to improve the student experience. While adaptive learning is well-established in programming, it is rarely used in cybersecurity education. This paper is one of the first works investigating adaptive learning in security training. First, we analyze the performance of 95 students in 12 training sessions to understand the limitations of the current training practice. Less than half of the students completed the training without displaying a solution, and only in two sessions, all students completed all phases. Then, we simulate how students would proceed in one of the past training sessions if it would offer more paths of various difficulty. Based on this simulation, we propose a novel tutor model for adaptive training, which considers students' proficiency before and during an ongoing training session. The proficiency is assessed using a pre-training questionnaire and various in-training metrics. Finally, we conduct a study with 24 students and new training using the proposed tutor model and adaptive training format. The results show that the adaptive training does not overwhelm students as the original static training. Adaptive training enables students to enter several alternative training phases with lower difficulty than the original training. The proposed format is not restricted to a particular training. Therefore, it can be applied to practicing any security topic or even in related fields, such as networking or operating systems. Our study indicates that adaptive learning is a promising approach for improving the student experience in security education. We also highlight implications for educational practice.