Security Course Research Articles

Improving students’ problem-solving ability through the ‘information system security’ project guided by the theory of inventive problem solving (TIPS)

ABSTRACT To improve the practical effect of an information system security course for students majoring in information security, a teaching method based on the theory of inventive problem solving (TIPS) that combines case-based teaching and project practice was introduced in the class. Adopting innovative thinking methods, we instructed students on the projects and goals of curriculum design. Using TIPS tools, the students completed complex projects. To test the teaching results, we examined 121 students who received case-based teaching using the TIPS method to design innovative projects. Quantitative data were collected using a statistically analysed anonymised questionnaire, while qualitative data collected from student reflective reports were thematically analysed. Through the in-depth development involved in the teaching of this course, their thinking and problem-solving ability significantly improved. The teaching effect evaluations indicated that this teaching method effectively improved students’ practical abilities. This method was found to be conducive to planning students’ future careers.

Reverse teaching design of curriculum ideological and political in information security major —Take the wireless communication network security course of Xidian University as an example

Reverse teaching design of curriculum ideological and political in information security major —Take the wireless communication network security course of Xidian University as an example

Exploration and practice of curriculum ideological and Political Construction Reform ——Take "information security" course as an example

According to the goal of " Curriculum ideological and politics", taking information security course as an example, focusing on the leading ideology facing the frontier of international scientific application, facing the national major needs and facing the main battlefield of economy, through the penetration of Frontier Science and technology and national security regulations into the curriculum practice, the teaching cases in the information security course are excavated, and a set of Curriculum System Integrating Ideological and political and curriculum content is formed. Cultivate and practice the socialist core values and guide students to be human and do things correctly.

EU Cultural Security Law in an Educational Context

Cultural security is a comprehensive notion that has gained much attention in the recent cultural heritage debates. In terms of the EU, it encapsulates cultural heritage destruction and protection in armed conflicts, post-war cultural heritage management, restitution, illicit traffic of cultural property, cultural diversity, and intercultural dialogue. The article aims to present how cultural security matters appear in the EU legal system and policy. The authors argue that cultural security is present in different policies regarding cultural property and the fight against illicit trafficking, as well as in EU external cultural relations. Digitization in the cultural sector constitutes a challenge, facilitates access to cultural heritage, and is an important tool for future cultural security. Therefore, EU law in the context of cultural security is analyzed. The authors took the Polish law as an example of how cultural security can be safeguarded while promoting an EU Member State’s jurisdiction. The paper’s educational part offers some ideas on creating and incorporating law and cultural security courses into varied higher education programs.

Toward Unseating the Unsafe C Programming Language

Reflecting on content that I taught in a recent security course about software-based vulnerabilities, I wondered: Am I giving too much focus to the C programming language? C-based examples get straight to the point, allowing compact illustrations of the concepts underlying stack-and heap-based buffer overruns and return-oriented programming, aside from integer-based vulnerabilities, related to arithmetic underflow, conversions between signed and unsigned values, and errors due to the compiler promotion of short-integer data types in arithmetic expressions.1 But are these relevant for today's students, given the wide availability of modern languages with strong language safety properties? Unfortunately, the answer is still yes.

Knowledge and Practice of Patients' Data Sharing and Confidentiality Among Nurses in Jordan.

BackgroundThe key patient rights entail respecting human decency, receiving healthcare services of high-quality, the right to information, the initial agreement of the patient to medical intervention, respecting privacy and personal life, and sustaining care and treatment. This study aims to survey the knowledge and practice of nurses in various healthcare industries toward sharing and confidentiality of patients’ data.MethodsA descriptive cross-sectional design was employed through an online survey from May to June 2020. The authors sent a developed tool containing 19 statements reflecting the understanding of nurses’ knowledge and practice of privacy and sharing of data required to safeguard patient privacy. A total of 800 nurses agreed to participate in the study out of 1000 nurses.ResultsRoughly, all participants agreed that junior nurses should participate in a data sharing and confidentiality course before engaging in practice. Regarding institution policies for data sharing and protection, many nurses agreed that there are special recommendations and instructions from the institution in which they work to exchange patient information among nurses and the medical staff. The predictors of sharing practices and confidentiality among nurses include age, gender, marriage status, and attending a security course before practice. Young age, female, not attending a data sharing course, and single nurses are less engaging with data sharing and confidentiality of the patients for unauthorized patients.ConclusionA significant proportion of the staff had appropriate practices that ensured data security. However, practices that ensure patient confidentiality in the aspects of access, sharing, and transferring of patient data need improvement. Training is essential since it will have a beneficial relationship with knowledge, opinions, views, and actions. Thus, planning continuous training on policies and regulations about data safety and privacy may assist in improving healthcare setting practices.

Increasing cyber security awareness by creating a case study and video project

Writing case studies in undergraduate and graduate courses in cyber security is a great way to learn class material. In this assignment, a student creates a case study and video about a cyber secur...

사회복지학 교과목 플립러닝 적용 사례분석과 효과적 운영 방안

사회복지학 교과목 플립러닝 적용 사례분석과 효과적 운영 방안

Empirical Evidence for a Descriptive Model of Principles of Information Security Course

The purpose of this study is to examine the nature and content of the rapidly evolving undergraduate Principles of Information/Cybersecurity course which has been attracting an ever-growing attention in the computing discipline, for the past decade. More specifically, it is to provide an impetus for the design of standardized principles of Information/Cybersecurity course. To achieve this, a survey of colleges and universities that offer the course was conducted. Several schools of engineering and business, in universities and colleges across several countries were surveyed to generate necessary data. Effort was made to direct the questionnaire only to Computer Information System (CIS), Computer Science (CS), Management Information System (MIS), Information System (IS) and other computer-related departments. The study instrument consisted of two main parts: one part addressed the institutional demographic information, while the other focused on the relevant elements of the course. There are sixty-two (62) questionnaire items covering areas such as demographics, perception of the course, course content and coverage, teaching preferences, method of delivery and course technology deployed, assigned textbooks and associated resources, learner support, course assessments, as well as the licensure-based certifications. Several themes emerged from the data analysis: (a) the principles course is an integral part of most cybersecurity programs; (b) majority of the courses examined, stress both strong technical and hands-on skills; (c) encourage vendor-neutral certifications as a course exit characteristic; and (d) an end-of-course class project, remains a standard requirement for successful course completion. Overall, the study makes it clear that cybersecurity is a multilateral discipline, and refuses to be confined by context and content. It is envisaged that the results of this study would turn out to be instructive for all practical purposes. We expect it to be one of the most definitive descriptive models of such a cardinal course, and help to guide and actually, shape the decisions of universities and academic programs focusing on information/cyber security in the updating and upgrading their curricula, most especially, the foundational principles course in light of new findings that are herein articulated.

Piloting a Safe Health Researcher course

Robust and standardised licensing and governance frameworks are used to ensure that datasets intended for research use are made available under the terms and conditions specified by a data owner.
 The UK Data Service makes use of the Five Safes framework to operate its 3-tier data access policy, and ensuring that data classified as personal data can be made available via appropriate legal gateways. This set of principles has gained traction with national statistics around the world, yet it is remarkably absent in the narrative of data access for health research. The health domain tends to focus on ‘data sharing agreements’, and less on training around trust, security and disclosure. The concept of a Safe Health Researcher is missing, yet is appealing.
 The UK Data Service has been piloting such a half day course, with colleagues in the health domain. The training helps consolidate the less well defined idea of a ‘bona fide’ researcher, typically required by funders such as the UK’s Medical Research Council when accessing their data assets. The term bonafide makes some assumptions about the credentials of the researchers, yet fails to ‘test’ them, instead relying on ‘trust ‘underwritten by the individual’s university, and maybe a short online security course.
 While purposeful breaches are certainly not common place, a researcher accessing personal or sensitive data would benefit from a structured half-day course that covers aspects of: potential/ actual disclosure risk in health data and appropriate access pathways; safeguards to be put in place when data with risk are shared; and what might constitute a published ‘unsafe’ output, i.e. with a risk of disclosure. The training focuses on health data and research examples, and draws on aspects of the research data management and publishing training undertaken by the UK Data Service (e.g. Corti et al, 2014) and on the UK Statistics Authority approved ‘Safe Research Training’ (SRT) course, which leads to the Accredited Researcher status.

Developing interdisciplinary thinking in a food and nutritional security, hunger, and sustainability graduate course

ABSTRACT Purpose: The purpose of this study was to describe faculty and graduate students’ motivation and learning experiences in a multi-institutional, interdisciplinary graduate course focused on the nexus of food and nutritional security, hunger, and sustainability. Design/Methodology/Approach: A one-group pre-experimental case study design was used. Faculty and students completed questionnaires, which included rating scales and open-ended questions. Data were analyzed and triangulated into key findings. Findings: Results indicated that faculty were interested and engaged in the development of the interdisciplinary course, and students were engaged in interdisciplinary learning and developed communication and education skills through experiential place-based learning. Practical Implications: Faculty developed a common understanding of their different disciplinary perspectives that helped provide a more cohesive and complementary interdisciplinary learning experience for students. Students learned about global challenges while identifying similar challenges in their local communities through the experiential learning assignments. Theoretical Implications: The design of the interdisciplinary course helped students think critically and creatively to learn complex issues. Advances in technology and active learning support a flipped classroom model to engage students. Place-based learning combined with interdisciplinary classroom experiences connected students to local real-world contexts and provided students with practical applications of problem-solving, critical thinking, and systems thinking skills. Originality/Value: Graduate students conducted an asset and needs assessment, which connected them to professionals in the community. Students think food and nutritional security, hunger, and sustainability are global challenges and seldom notice food insecurity in their local communities.

Prototype of Learning Applications for Modern Cryptographic Techniques Using RC4 Algorithms to Support Computer Security Courses

The security of information in this global era is increasingly becoming a vital need in various aspects of life. An information will have a higher value when it comes to aspects of business decisions. This study presents a learning application to explain how to secure data using cryptographic techniques. This study aims to design a prototype learning application of cryptographic techniques using algorithm RC4 method. Based on the results of data analysis and after completing the design of RC4 algorithm cryptographic learning software, the authors found this software shows every step and stages of the processes (data input process (Plaintext or Ciphertext string), Key padding process (U), formation process in S-Box table, the Key-Flow formation process (K-keystream), encryption process and decryption process) contained in RC4 algorithm cryptography, so it can help understanding or learning work procedures of algorithms in the cryptographic method. Microsoft Visual Basic 2008 is an IDE (Integrated Development Environment) application that is used to create and develop software. In this application there were various features that facilitate programming such as compilation, debugging, project settings, designing and editing visual interfaces, and so on.

SecRet: How to Apply the 5E Model for a Master’s Level Network Security Course

Engagement, exploration, explication, elaboration, and evaluation are the five stages of learning of the 5E's Instructional Model. We show that the 5E's main concepts can be successfully applied to a Master's level course in network security to provide a student-centered learning approach. We present the various techniques that we have used during the course, with a focus on active learning enhanced by technology usage. We provide examples, insights, and recommendations that are intended to help other educators. Our findings are general and can be applied in other contexts as well.

Construction of Network Security Course Experimental Platform Based on Virtual Machine and Network Simulator

Construction of Network Security Course Experimental Platform Based on Virtual Machine and Network Simulator

Effect of Active Learning Techniques on Student Excitement, Interest, and Self-Efficacy

What is the impact of active learning techniques on student excitement, interest, and self-efficacy in a course? An American Foreign Policy and National Security course was designed around the utilization of a number of active learning techniques, including simulations, a debate, and counterfactual analysis. Students in the course were surveyed about their feelings of excitement toward the course, interest in course material, and feelings that they could do well in the course as a result of each aspect of course design. Results of the surveys reveal that the active learning techniques did indeed increase students’ excitement, interest, and self-efficacy, suggesting that courses utilizing course designs centered on student engagement and enjoyment could bolster students’ overall learning in courses.

Effects of Online Instruction to Student Motivation and Level of Participation in IT Network & Security Course

Technologies have a great and positive impact on students’ learning. Innovation of technology in teaching is now widespread, especially in creating lessons that are more interesting. Online instructions were created to improve and enhance student motivation in learning selected topics in the IT Network and Security course at the College of Computer Studies at the University of Antique, Philippines. The subjects of this study were 46 students from the Bachelor of Science in Information Technology (BSIT). This study primarily aims to analyze the impact of online instructions on students’ learning.

Teaching how to stop the bleed: does it work? A prospective evaluation of tourniquet application in law enforcement officers and private security personnel.

Stop the Bleed (STB) program was launched by the White House, for the use of bleeding control techniques at the scene of traumatic injury. The purpose of this study was to conduct an STB course in private security and law enforcement personnel. Pre- and post-questionnaire using the Likert scale was shared with participants on their knowledge and comfort level with the use of tourniquets. Participants were also observed while placing tourniquets and the time for placement recorded. The didactic portion and practical session of the STB was then taught and participants were again observed placing tourniquets and a questionnaire distributed. Fisher's exact tests or Wilcoxon matched-pairs signed-ranks tests were used to compare pre-post measurements. A total of 151 subjects were enrolled over the course of seven sessions. The tourniquet was applied correctly by 17.2% (26/151) and 92.7% (140/151) at the pre- and post-instruction assessments, respectively (p < 0.001). Mean times to apply the tourniquet were 29.8 ± 18.5 and 18.7 ± 6.7s, respectively (p < 0.001). Subjects reported their level of comfort with the tourniquet to be 5.1 ± 3.3 and 8.8 ± 2.2, respectively (p < 0.001), and their familiarity with anatomy and bleeding control to be 5.2 ± 3.1 and 8.2 ± 2.4, respectively (p < 0.001). At the end of the course, the mean score in response to a question about the extent to which the explanation had helped was 9.0 ± 1.9 (95% CI 8.7-9.4) and to a question about the extent to which teaching would make them feel more secure and safe was 9.2 ± 1.9 (95% CI 8.9-9.5). STB course improved correct tourniquet placement, demonstrated dramatic improvements in application time, and increased levels of comfort. These findings validate the need for ongoing teaching and education.

Collaborative security risk estimation in agile software development

Purpose Today, agile software development teams in general do not adopt security risk-assessment practices in an ongoing manner to prioritize security work. Protection Poker is a collaborative and lightweight software security risk-estimation technique that is particularly suited for agile teams. Motivated by a desire to understand why security risk assessments have not yet gained widespread adoption in agile development, this study aims to assess to what extent the Protection Poker game would be accepted by agile teams and how it can be successfully integrated into the agile practices. Design/methodology/approach Protection Poker was studied in capstone projects, in teams doing a graduate software security course and in sessions with industry representatives. Data were collected via questionnaires, observations and group interviews. Findings Results show that Protection Poker has the potential to be adopted by agile teams. Key benefits include good discussions on security and the development project, along with increased knowledge and awareness. Challenges include ensuring efficient use of time and gaining impact on the end product. Research limitations/implications Using students allowed easy access to subjects and an ability to collect rich data over time, but at the cost of generalizability to professional settings. Results from interactions with professionals supplement the data from students, showing similarities and differences in their opinions on Protection Poker. Originality/value The paper proposes ways to tackle the main obstacles to the adoption of the Protection Poker technique, as identified in this study.

Educação permanente sobre álcool e outras drogas: saberes e práticas de profissionais de um curso de segurança pública

Permanent education about the use of alcohol and other drugs: knowledge and practices of professionals enrolled in a public security course

Exploration on the Construction of Digital Content Security Course under the Background of "New Engineering Disciplines"

According to the development and construction of the "new engineering disciplines", the training requirements for talents and the construction of digital content security course are discussed in this paper. Based on the current development situation, this paper clarifies the tightness of digital content security and the development of "new engineering disciplines". The digital content security course has both a complete frontier theoretical system and close correlation with various new engineering disciplines. Combining these two characteristics, this paper proposes three aspects of construction: comprehensive social resources, the formation of a new curriculum teaching system, and the creation of a digital content security gold course; further introduction of school-enterprise cooperation, promotion of the combination of production and education, practical and targeted activities; training of students’ ability to master and apply digital content security and promotion of the construction of applied undergraduate programs.