Incorporating active learning activities to the design and development of an undergraduate software and web security course

Abstract

Data breaches and cybersecurity incidents have been a major concern for companies in various sectors, including healthcare, financial, entertainment, business, education, and government. Maintaining and protecting these systems requires a workforce that is educated with the practical and technical skills needed by cybersecurity experts for information warfare and non-technical skills demanded by the industry. This paper describes the design and development of an undergraduate software and web security course using active learning strategies. It discusses the rationale in the course design on the selected cybersecurity knowledge and skills for a cybersecurity course developed at York College of the City University of New York (CUNY). Several active learning activities were used to promote both technical security and non-technical skills necessary to perform cybersecurity work, such as think-pair-share, buzz group, and roleplay. The results show that active learning help promote students' development in solving problems, proposing solutions, and explaining ideas through writing and discussion, essential cybersecurity skills. The paper may serve as an informative guide for other instructors to promote active learning in their cybersecurity courses. A course evaluation survey has suggested favorable results using active learning activities in the class. Students believe that it helped them to understand complex concepts and engage with the materials and activities.

Secure Coding and Software Vulnerabilities in Implementation Phase of Software Development

“…It also explains how it can affect the system and discovers how it can protect the system from cyber-attacks [19][20][21]. These mitigations provide solutions that can be included in the designing of software by the software developer and contribute to secure coding standards for commonly used programming languages, regardless of the device used for programming [22]. After all, putting stronger latches on your home gate is of no use if the windows are left open.…”

Using Design-Based Research to Layer Career-Like Experiences onto Software Development Courses

“…In the instance where no corroborative studies were found for the optimal number of project presentations, it was determined that both three and four class presentations worked well. When additional project guidance was requested, a portion of face-to-face time shifted to active learning through guided discussions, Scrum tools, agile practices, and group learning (Srivatanakul & Annansingh, 2022). It was unexpected that a second project would be requested, and it was a pleasant surprise to find that a single standardized template could be combined with active learning to effectively add projects to both courses.…”

Addressing Cybersecurity Challenges in Education

“…Corporations have also signed cooperation agreements with learning institutions to increase the number of students training to become cybersecurity professionals. Srivatanakul and Annansingh (2021) found that corporations helped institutions of learning to design cybersecurity courses and training programs based on the requirements and skillset that cybersecurity specialists should possess. The collaboration between colleges and organizations has ensured that students undertaking cybersecurity courses can access practical training from such organizations through internships.…”