14 votes

How to raise students' security awareness in programming?

Make it into an assignment/game. Each student creates a project that is passed to another, randomly chosen student, to hack. Give points for both the project and the "hacking" results. The hacking ...
  • 311
11 votes

How do I teach ethics in hacking?

I like your locksmith comparison, but I don't agree with the following assertion: From there, we arrive at this fine distinction: if a security feature is designed to keep you out, even if that ...
8 votes

Is Cyber-Security E-safety or not

E-Safety is typically used to mean safety online, which for kids is usually a bit of awareness training around scams, dangers of dodgy sites, online bullying, awareness that anything that happens ...
7 votes

While giving an introduction to the Internet, should I talk about the risks?

Yes. You should absolutely identify the specific risks of each technology or tool that you are going to teach and discuss those risks before you assign students to use those technologies or tools. ...
7 votes

Classroom use of a limited port scan in the wild?

I taught a Cisco networking class for a couple of years and we had to stay off of the district network any time we were doing networking stuff. What I did was build a separate network in the middle ...
  • 3,039
7 votes

What is a good way to explain computer viruses?

Viruses, worms and other malware are actually just like physical infections in enough ways that I still think metaphors are the best way to educate from a basic level. Even the average home user knows ...
6 votes

How do I teach ethics in hacking?

First please be very cognizant of the term "hacking" Some of what you are describing is "cracking" not "hacking" The techniques may be the same but the intent is different. I think you are having ...
5 votes

What should be in a CyberSecurity Course in secondary school?

The course that I offered was all about gdb, hexdumps, buffer overflows, and format string vulnerabilities. As a textbook, we used Hacking, by Jon Erickson. AP CS A was a prerequisite of the course, ...
  • 31.7k
5 votes

What should be in a CyberSecurity Course in secondary school?

I have taught various levels of Information Security, from basic security at schools and university to "extreme hacking" for experienced professionals at global security consultancies. Currently I'm ...
4 votes
Accepted

Teaching information security to students without basic IT knowledge

I don't see any particular problems with your syllabus. However, I do see two challenges that you will need to overcome. Depending on other factors in your context these may be easy or hard. But there ...
  • 35.1k
4 votes

What is a good way to explain computer viruses?

I go ahead and use something a little dramatic in my sessions. I use the vampire mythology to explain viruses. For instance, vampires only come in when invited. Viruses are the same. The user has ...
  • 1,874
4 votes

How do I teach ethics in hacking?

I would go about detailing how much profit a white hacker can get, seeing as many security companies hire them as test attackers. If any of the kids are tempted be unethical things, then explain ...
  • 6,227
4 votes

How to raise students' security awareness in programming?

As mentioned in other answer making education like a game is good idea. You can use SQL Injection as one of the examples, other like password to be word from the web page itself, other can be ...
4 votes

Classroom use of a limited port scan in the wild?

It's certainly ethical to teach the existence of such tools. It's only unethical if the teacher neglects to teach the legality of these tools along with their existence, or if the teacher advises ...
  • 4,754
4 votes
Accepted

Classroom use of a limited port scan in the wild?

In general is is unethical to teach people skills that they intend to employ to harm others. That said, it is hard to know the intent of your students. Do you have Beavis and Butthead in your class? ...
  • 35.1k
3 votes

Classroom use of a limited port scan in the wild?

Teaching about the existence of such tools is totally ethical. We need people who understand computer security, period. Mentioning the law is also almost self-apparently necessary. In my district, ...
  • 31.7k
3 votes

How do I teach ethics in hacking?

This seems insufficient to me, because of the following example at a minimum: In small towns, people do not lock their doors, or at least they did in bygone days of yore, or so the story goes. If you ...
2 votes

How to raise students' security awareness in programming?

I would just try to make resources available to them and make sure to give examples of what not to do (e.g. Your example). In terms of resources, I'd provide info about attack vectors, threat models, ...
  • 4,754
2 votes

How to raise students' security awareness in programming?

Emphasize the 'stupidity' of security holes - they aren't weaknesses that only geniuses with a bone to pick can root out, they're the same mistakes repeated ad nauseam between different companies, ...
  • 121
2 votes

How to raise students' security awareness in programming?

Security vulnerabilities are just bugs. In your example the code does not do what it is supposed to do (keep the bad people out). So treat them this way. “We have a bug. The program does not meet its ...
2 votes

Teaching information security to students without basic IT knowledge

You may have to rethink the curriculum design at a higher level ( involving other staff ). Do you kick people off the course, loosing revenue. Do you teach extra lessons to get them up to entry ...
2 votes

Curricular Support for a CyberPatriot Club

I'm not sure how engaging these would be, but as a source of exercises and practice content, you might look towards IT professional certifications. There are things like A+ (general IT), Networking+, ...
1 vote

Popular demonstration of cryptographic tools

Have you considered a practical example like teaching PGP email encryption? Keybase.io has a browser based crypto solution for doing encryption / decryption and while I don't recommend for "real" ...
1 vote

Popular demonstration of cryptographic tools

I thoroughly recommend Cryptool2. It's an open-source GUI where you can drag and drop different algorithms, inputs and outputs and see the results in real time. It can be used to show very basic ...
1 vote

Popular demonstration of cryptographic tools

There are some engaging lessons on encryption in Unit 4 of the AP Computer Science Principles curriculum from Code.org. Lessons 5, 6 & 7 take students from the concept of encryption using a ...
  • 11
1 vote
Accepted

What is a good way to explain computer viruses?

To explain what a virus is, it is easier to also explain what a virus scanner is. A virus is malicious software, that takes advantage of bugs in you computer's operating system, and applications. They ...
1 vote

What should be in a CyberSecurity Course in secondary school?

An important and fairly contained topic is to introduce the impact of technology changing. As software designers, we will make assumptions which have a critical impact on security. Bunnie interposed a ...
1 vote

How do I teach ethics in hacking?

If students are learning penetration tools and techniques, they should first be required to learn, at a minimum: What is illegal and the civil, criminal, and professional penalties (I have students ...
1 vote

How to raise students' security awareness in programming?

I would have a "guest lecturer" who was a cybersecurity professional teach one class. (Maybe I would give a test on the lecture the following day.) Most CS instructors are aware of security problems ...
  • 475

Only top scored, non community-wiki answers of a minimum length are eligible