Evaluating Two Approaches to Assessing Student Progress in Cybersecurity Exercises

Investor logo

Warning

This publication doesn't include Faculty of Economics and Administration. It includes Institute of Computer Science. Official publication website can be found on muni.cz.
Authors

ŠVÁBENSKÝ Valdemar WEISS Richard COOK Jack VYKOPAL Jan ČELEDA Pavel MACHE Jens CHUDOVSKÝ Radoslav CHATTOPADHYAY Ankur

Year of publication 2022
Type Article in Proceedings
Conference Proceedings of the 53rd ACM Technical Symposium on Computer Science Education (SIGCSE '22)
MU Faculty or unit

Institute of Computer Science

Citation
Web
Doi http://dx.doi.org/10.1145/3478431.3499414
Keywords cybersecurity education; command-line history; educational data mining; learning analytics; assessment; modeling
Attached files
Description Cybersecurity students need to develop practical skills such as using command-line tools. Hands-on exercises are the most direct way to assess these skills, but assessing students' mastery is a challenging task for instructors. We aim to alleviate this issue by modeling and visualizing student progress automatically throughout the exercise. The progress is summarized by graph models based on the shell commands students typed to achieve discrete tasks within the exercise. We implemented two types of models and compared them using data from 46 students at two universities. To evaluate our models, we surveyed 22 experienced computing instructors and qualitatively analyzed their responses. The majority of instructors interpreted the graph models effectively and identified strengths, weaknesses, and assessment use cases for each model. Based on the evaluation, we provide recommendations to instructors and explain how our graph models innovate teaching and promote further research. The impact of this paper is threefold. First, it demonstrates how multiple institutions can collaborate to share approaches to modeling student progress in hands-on exercises. Second, our modeling techniques generalize to data from different environments to support student assessment, even outside the cybersecurity domain. Third, we share the acquired data and open-source software so that others can use the models in their classes or research.
Related projects:

You are running an old browser version. We recommend updating your browser to its latest version.