ŠVÁBENSKÝ, Valdemar, Pavel ČELEDA, Jan VYKOPAL and Silvia BRIŠÁKOVÁ. Cybersecurity Knowledge and Skills Taught in Capture the Flag Challenges. Computers & Security. Elsevier, 2021, vol. 102, No 102154, p. 1-14. ISSN 0167-4048. doi:10.1016/j.cose.2020.102154.
Other formats:   BibTeX LaTeX RIS
Basic information
Original name Cybersecurity Knowledge and Skills Taught in Capture the Flag Challenges
Authors ŠVÁBENSKÝ, Valdemar (703 Slovakia, guarantor, belonging to the institution), Pavel ČELEDA (203 Czech Republic, belonging to the institution), Jan VYKOPAL (203 Czech Republic, belonging to the institution) and Silvia BRIŠÁKOVÁ (703 Slovakia, belonging to the institution).
Edition Computers & Security, Elsevier, 2021, 0167-4048.
Other information
Original language English
Type of outcome Article in a journal
Field of Study 10201 Computer sciences, information science, bioinformatics
Country of publisher United States of America
Confidentiality degree is not subject to a state or trade secret
WWW Preprint on ArXiv Published version on Elsevier ScienceDirect
Impact factor Impact factor: 4.438 in 2020
Organization unit Institute of Computer Science
Doi http://dx.doi.org/10.1016/j.cose.2020.102154
UT WoS 000613150400007
Keywords in English cybersecurity education; security training; capture the flag; curricular guidelines
Tags best2, J-Q1
Tags International impact, Reviewed
Changed by Changed by: RNDr. Valdemar Švábenský, učo 395868. Changed: 10. 11. 2021 13:54.
Abstract
Capture the Flag challenges are a popular form of cybersecurity education, where students solve hands-on tasks in an informal, game-like setting. The tasks feature diverse assignments, such as exploiting websites, cracking passwords, and breaching unsecured networks. However, it is unclear how the skills practiced by these challenges match formal cybersecurity curricula defined by security experts. We explain the significance of Capture the Flag challenges in cybersecurity training and analyze their 15,963 textual solutions collected since 2012. Based on keywords in the solutions, we map them to well-established ACM/IEEE curricular guidelines to understand which skills the challenges teach. We study the distribution of cybersecurity topics, their variance in different challenge formats, and their development over the past years. The analysis showed the prominence of technical knowledge about cryptography and network security, but human aspects, such as social engineering and cybersecurity awareness, are neglected. We discuss the implications of these results and relate them to contemporary literature. Our results indicate that future Capture the Flag challenges should include non-technical aspects to address the current advanced cyber threats and attract a broader audience to cybersecurity.
Links
EF16_019/0000822, research and development projectName: Centrum excelence pro kyberkriminalitu, kyberbezpečnost a ochranu kritických informačních infrastruktur
MUNI/A/1527/2020, internal MU codeName: Aplikovaný výzkum na FI: softwarové architektury kritických infrastruktur, bezpečnost počítačových systémů a zpracování senzorových dat (Acronym: SVFI-SSS)
Investor: Masaryk University, Specific research - support for student projects
PrintDisplayed: 29. 11. 2021 13:51