D 2020

What Are Cybersecurity Education Papers About? A Systematic Literature Review of SIGCSE and ITiCSE Conferences

ŠVÁBENSKÝ, Valdemar; Jan VYKOPAL and Pavel ČELEDA

Basic information

Original name

What Are Cybersecurity Education Papers About? A Systematic Literature Review of SIGCSE and ITiCSE Conferences

Authors

ŠVÁBENSKÝ, Valdemar; Jan VYKOPAL and Pavel ČELEDA

Edition

New York, NY, USA, Proceedings of the 51st ACM Technical Symposium on Computer Science Education (SIGCSE '20), p. 2-8, 7 pp. 2020

Publisher

ACM

Other information

Language

English

Type of outcome

Proceedings paper

Country of publisher

United States of America

Confidentiality degree

is not subject to a state or trade secret

Publication form

electronic version available online

References:

URL, URL, URL

Marked to be transferred to RIV

Yes

RIV identification code

RIV/00216224:14610/20:00115110

Organization

Ústav výpočetní techniky – Repository – Repository

ISBN

978-1-4503-6793-6

DOI

https://doi.org/10.1145/3328778.3366816

UT WoS

000810169400002

EID Scopus

2-s2.0-85081596685

Keywords in English

cybersecurity education; systematic literature review; systematic mapping study; survey; SIGCSE community; ITiCSE community

Links

EF16_019/0000822, research and development project. MUNI/A/1076/2019, interní kód Repo. MUNI/A/1411/2019, interní kód Repo.
Changed: 15/5/2024 03:40, RNDr. Daniel Jakubík

Abstract

In the original language

Cybersecurity is now more important than ever, and so is education in this field. However, the cybersecurity domain encompasses an extensive set of concepts, which can be taught in different ways and contexts. To understand the state of the art of cybersecurity education and related research, we examine papers from the ACM SIGCSE Technical Symposium and ACM ITiCSE conferences. From 2010 to 2019, a total of 1,748 papers were published at these conferences, and 71 of them focus on cybersecurity education. The papers discuss courses, tools, exercises, and teaching approaches. For each paper, we map the covered topics, teaching context, evaluation methods, impact, and the community of authors. We discovered that the technical topic areas are evenly covered (the most prominent being secure programming, network security, and offensive security), and human aspects, such as privacy and social engineering, are present as well. The interventions described in SIGCSE and ITiCSE papers predominantly focus on tertiary education in the USA. The subsequent evaluation mostly consists of collecting students' subjective perceptions via questionnaires. However, less than a third of the papers provide supplementary materials for other educators, and none of the authors published their dataset. Our results are relevant for instructors, researchers, and anyone new in the field of cybersecurity education, since they provide orientation in the area, a synthesis of trends, and implications for further research. The information we collected and synthesized from individual papers are organized in a publicly available dataset.
Displayed: 6/5/2026 18:03