We have designed and developed a simple, visual, and narrative K-12 cybersecurity curriculum leveraging the Scratch programming platform to demonstrate and teach fundamental cybersecurity concepts such as confidentiality, integrity protection, and authentication. The visual curriculum simulates a real-world scenario of a user and a bank performing a bank transaction and an adversary attempting to attack the transaction.We have designed six visual scenarios, the curriculum first introduces students to three visual scenarios demonstrating attacks that exist when systems do not integrate concepts such as confidentiality, integrity protection, and authentication. Then, it introduces them to three visual scenarios that build on the attacks to demonstrate and teach how these fundamental concepts can be used to defend against them. We conducted an evaluation of our curriculum through a study with 18 middle and high school students. To evaluate the student's comprehension of these concepts we distributed a technical survey, where overall average of students answering these questions related to the demonstrated concepts is 9.28 out of 10. Furthermore, the survey results revealed that 66.7% found the system extremely easy and the remaining 27.8% found it easy to use and understand.
翻译:我们设计并开发了一个简单、直观和叙述性的 K-12 网络安全课程,利用Scratch 编程平台展示和教授基本网络安全概念,如保密、廉正保护和认证等。视觉课程模拟了一个用户和银行进行银行交易的实际情况,并模拟了一个试图打击交易的对手。我们设计了六种视觉情景,该课程首先向学生介绍三个视觉情景,显示在系统不包含保密、廉正保护和认证等概念时发生的攻击。然后,该课程向学生介绍三个视觉情景,这些情景以攻击为基础,展示并教授如何利用这些基本概念来防御这些概念。我们通过对18名中中学生进行的一项研究对课程进行了评估。为了评估学生对这些概念的理解,我们开展了一项技术调查,在其中,回答与所展示的概念有关的这些问题的学生的总体平均数为9.28出10。此外,调查结果显示,66.7%的人发现系统极其容易使用,其余27.8%的人则认为容易使用和理解。