Další formáty:
BibTeX
LaTeX
RIS
@article{1715556,
author = {Švábenský, Valdemar and Čeleda, Pavel and Vykopal, Jan and Brišáková, Silvia},
article_number = {102154},
doi = {http://dx.doi.org/10.1016/j.cose.2020.102154},
keywords = {cybersecurity education; security training; capture the flag; curricular guidelines},
language = {eng},
issn = {0167-4048},
journal = {Computers & Security},
title = {Cybersecurity Knowledge and Skills Taught in Capture the Flag Challenges},
url = {https://www.sciencedirect.com/science/article/pii/S0167404820304272},
volume = {102},
year = {2021}
}
TY - JOUR
ID - 1715556
AU - Švábenský, Valdemar - Čeleda, Pavel - Vykopal, Jan - Brišáková, Silvia
PY - 2021
TI - Cybersecurity Knowledge and Skills Taught in Capture the Flag Challenges
JF - Computers & Security
VL - 102
IS - 102154
SP - 1-14
EP - 1-14
PB - Elsevier
SN - 01674048
KW - cybersecurity education
KW - security training
KW - capture the flag
KW - curricular guidelines
UR - https://www.sciencedirect.com/science/article/pii/S0167404820304272
N2 - Capture the Flag challenges are a popular form of cybersecurity education, where students solve hands-on tasks in an informal, game-like setting. The tasks feature diverse assignments, such as exploiting websites, cracking passwords, and breaching unsecured networks. However, it is unclear how the skills practiced by these challenges match formal cybersecurity curricula defined by security experts. We explain the significance of Capture the Flag challenges in cybersecurity training and analyze their 15,963 textual solutions collected since 2012. Based on keywords in the solutions, we map them to well-established ACM/IEEE curricular guidelines to understand which skills the challenges teach. We study the distribution of cybersecurity topics, their variance in different challenge formats, and their development over the past years. The analysis showed the prominence of technical knowledge about cryptography and network security, but human aspects, such as social engineering and cybersecurity awareness, are neglected. We discuss the implications of these results and relate them to contemporary literature. Our results indicate that future Capture the Flag challenges should include non-technical aspects to address the current advanced cyber threats and attract a broader audience to cybersecurity.
ER -
ŠVÁBENSKÝ, Valdemar, Pavel ČELEDA, Jan VYKOPAL a Silvia BRIŠÁKOVÁ. Cybersecurity Knowledge and Skills Taught in Capture the Flag Challenges. \textit{Computers \&{} Security}. Elsevier, 2021, roč.~102, č.~102154, s.~1-14. ISSN~0167-4048. doi:10.1016/j.cose.2020.102154.
|
