Towards a Design Theory for Educational On-line Information Security Laboratories

Conceptual Model of Online Pedagogical Information Security Laboratory: Toward an Ensemble Artifact

“…A recent literature review [4] revealed that most of the articles view labs as tools for achieving goals, without paying much attention to the whole package, in other words, thinking little about elements of the curriculum and the rationale behind it. Furthermore, most of the reviewed articles did not explicitly identify the core entities of an InfoSec lab, nor did they define the relationship between different entities of a lab.…”

“…For instance, in this case, Luleå University of Technology searched for a design exemplar of a pedagogical online InfoSec lab to adapt the design according to our pedagogical requirements. However, the literature review [4] shows there is a general absence of pedagogical approaches in the design and development of online InfoSec labs and related exercises. Problems such as this hinder efforts of information security teachers to adopt ready-made solutions available in the literature due to the lack of theoretical clarifications underlying the available solutions.…”

“…The review [4] also shows that the literature studied for this research mostly focuses on the tool view of online InfoSec labs by providing mostly the technical details of the labs. The lack of explicitly described pedagogical approaches and concrete design principles for designing and developing online InfoSec labs in the existing literature hinders the accumulation of technically and pedagogically rigorous knowledge [5].…”

“…A recent literature review [4] revealed the general absence of specific design methods focused on online InfoSec lab development. The review [4] also shows that the literature studied for this research mostly focuses on the tool view of online InfoSec labs by providing mostly the technical details of the labs.…”

“…Furthermore, distance students require a flexible mode of education in terms of time and space, so that they can continue their education in a way that will not hinder their job routines. Previous study advocates that the information security graduates should master hands-on approach in addition to theoretical education [4]. The information security laboratory allows implementation of hands-on laboratory experiences, which are vital elements of information security education at graduate level.…”