Content area
Full Text
ABSTRACT
Information security (InfoSec) education becomes increasingly important. Building hands-on capabilities to tackle challenges is a precondition to mitigate and eliminate cyber threats. Existing studies, however, show that the field lacks pedagogically founded information security laboratories that can be used flexibly to educate both on-campus and online learners. To address this issue, this paper reports on an online InfoSec laboratory. Development of the laboratory follows an action design research approach. For this purpose, initial design principles were used that are derived from the existing pedagogical theories such as Conversational Framework, Constructive Alignment, and Personalized System of Instruction, literature reviews and empirical data. Through iterative cycles of building, intervention, and evaluation of an InfoSec laboratory, and side-by-side critical reflections, this study refines the conceptual model of an online InfoSec laboratory and initial design principles and provides general guidelines on the process of establishing a pedagogically underpinned online InfoSec laboratory for hands-on exercises. This study contributes by serving two major purposes. First, this study proposes a conceptual model of an online InfoSec laboratory that comprises important entities: Laboratory Infrastructure, Exercise (document), Exercise Processing and Management Interface (EPI), and Concrete Exercise Interface. Secondly, the research proposes design principles for implementing a conceptual model of an online InfoSec laboratory in different educational contexts.
Keywords: Security, Online education, Online laboratory, Action design research, Personalized system of instruction (PSI)
1.INTRODUCTION
Information security has been recognized as a core subject in the Information Systems (IS) curriculums (Ayyagari and Tyks, 2012; Reid and Van Niekerk, 2013). Online learning has gained popularity (Allen and Seaman, 2010; Liu and Burn, 2007; Rodriguez, 2012) in the education sector. Accordingly, to fulfill the growing need for information security specialists, many institutes, including XYZ University, offer a Master's program in information security for both on-campus and online education. Online education brings unique challenges, (Allen and Seaman, 2010; Hentea, Dhillon, and Dhillon, 2006; Rodriguez, 2012) such as how to design a course that can impart theoretical and practical knowledge, while the students are located in different places and time zones. The availability of an efficient learning management system can resolve the issues of providing equal access to course material and submitting course assignments. However, the issues of arranging hands-on information security exercises remain a dilemma for online learners...