Training students to steal: A practical assignment in computer security education

    Research output: Chapter in Book/Conference proceedings/Edited volumeConference contributionScientificpeer-review

    7 Citations (Scopus)

    Abstract

    Practical courses in information security provide students with first-hand knowledge of technical security mechanisms and their weaknesses. However, teaching students only the technical side of information security leads to a generation of students that emphasize digital solutions, but ignore the physical and the social aspects of security. In the last two years we devised a course where students were given a practical assignment which includes a combination of physical security, social engineering and digital penetration testing. As part of the course, the students stole laptops using social engineering from unaware employees throughout the university campus. The assignment provided the students with a practical overview of security and increased their awareness of the strengths and weaknesses of security mechanisms. In this paper we present the design of the practical assignment and the observations from the execution.

    Original languageEnglish
    Title of host publicationSIGCSE'11 - Proceedings of the 42nd ACM Technical Symposium on Computer Science Education
    Pages21-26
    Number of pages6
    DOIs
    Publication statusPublished - 19 Apr 2011
    Event42nd ACM Technical Symposium on Computer Science Education, SIGCSE 2011 - Dallas, TX, United States
    Duration: 9 Mar 201112 Mar 2011

    Conference

    Conference42nd ACM Technical Symposium on Computer Science Education, SIGCSE 2011
    CountryUnited States
    CityDallas, TX
    Period9/03/1112/03/11

    Keywords

    • Computer security education
    • Laptop theft
    • Penetration testing
    • Physical security
    • Social engineering

    Fingerprint Dive into the research topics of 'Training students to steal: A practical assignment in computer security education'. Together they form a unique fingerprint.

    Cite this