skip to main content
US FlagAn official website of the United States government
dot gov icon
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
https lock icon
Secure .gov websites use HTTPS
A lock ( lock ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.


Title: Cyber-physical Shooting Gallery: Gamification to Address the IT-OT Gap in Cybersecurity Education
While much has been written on the dire need for workers who understand both the IT and OT core concepts necessary to protect the cyber-physical systems of critical infrastructure, practical and specific recommendations for how to meet this need through education and workforce training are lacking. Many of the available programs for teaching cybersecurity of physical systems rely on virtual simulations and students may not encounter relevant physical equipment until they are in the workplace. RADICL’s Cyber-physical Shooting Gallery is a critical missing piece toward a comprehensive system to develop the competent workforce the nation needs. Through a series of cyber-physical capture-the-flag challenges that integrate the Purdue ICS Model with the MITRE ATT&CK framework, the Cyber-physical Shooting Gallery provides an accessible educational model for cyber-physical security education and training.  more » « less
Award ID(s):
2146269
PAR ID:
10409803
Author(s) / Creator(s):
; ;
Date Published:
Journal Name:
Journal of The Colloquium for Information Systems Security Education
Volume:
10
Issue:
1
ISSN:
2641-4546
Page Range / eLocation ID:
6
Format(s):
Medium: X
Sponsoring Org:
National Science Foundation
More Like this
  1. To address the nationwide workforce shortage of skilled and educated cyber-informed engineers, we must develop low-cost and highly effective resources for industrial control systems education and training. College curricula in technology management, cybersecurity, and computer science aim to build students’ computational and adversarial thinking abilities but are often done only through theory and abstracted concepts [1]. To better a student’s understanding of industrial control system applications, post-secondary institutions can use gamification to increase student interest through an interactive, user-friendly, hands-on experience. RADICL CTF can provide post-secondary institutions with new opportunities for low-cost, guided exercises for industrial control system (ICS) education to help students master adversarial thinking. Based on an extension to picoCTF, RADICL CTF is a platform for students to design, implement and evaluate exercises that test their understanding of core concepts in industrial control systems cybersecurity, answering the need for more interactive education methods. The main contributions of this paper are the improvement of the cyber-security curriculum through extending the picoCTF platform to promote the gamification of industrial control system concepts with consideration to the Purdue Reference Architecture. 
    more » « less
  2. ASEE (Ed.)
    With manufacturing facilities across the country becoming more connected, it is critical that safeguards are in place to protect against threats to facilities’ cyber-physical systems. Technicians with training in robotics/automation/mechatronics are well positioned to help provide a first line of defense to such threats. This work, funded through a National Science Foundation (NSF) Advanced Technological Education (ATE) grant, seeks to enhance technician cybersecurity awareness through education and training. The paper provides details on the process the project team utilized to develop an initial micro-credential in the area of cybersecurity for robotics/automation/mechatronics. The paper focuses on the badge creation process and outlines how the badge modules developed can be shared to help raise cyber awareness in other fields, such as semiconductors, solar power, and electric vehicles. The badge leverages the work of other NSF ATE projects, providing a no-cost avenue for automation technicians to expand their background by earning a digital badge that enhances their resume. 
    more » « less
  3. The objective of this paper is to outline the details of a recently-funded National Science Foundation (NSF) Advanced Technological Education (ATE) project that aims to educate and enable the current and future manufacturing workforce to operate in an Industry 4.0 environment. Additionally, the startup procedures involved, the major ongoing activities during year-one, and preliminary impressions and lessons learned will be elaborated as well. Industry 4.0 refers to the ongoing reformation of advanced manufacturing (Operation Technologies - OT) enabled by advances in automation/data (Information Technologies - IT). Cyber-enabled smart manufacturing is a multidisciplinary approach that integrates the manufacturing process, its monitoring/control, data science, cyber-physical systems, and cloud computing to drive manufacturing operations. This is further propelled by the dissolution of boundaries separating IT and OT, presenting optimization opportunities not just at a machine-level, but at the plant/enterprise-levels. This so-called fourth industrial revolution is rapidly percolating the discrete and continuous manufacturing industry. It is therefore critical for the current and future US workforce to be cognizant and capable of such interdisciplinary domain knowledge and skills. To meet this workforce need, this project will develop curricula, personnel and communities in cyber-enabled smart manufacturing. The key project components will include: (i) Curriculum Road-Mapping and Implementation – one that integrates IT and OT to broaden the educational experience and employability via road-mapping workshops, and then to develop/implement curricula, (ii) Interdisciplinary Learning Experiences – through collaborative special-projects courses, industry internships and research experiences, (iii) Pathways to Industry 4.0 Careers – to streamline career pathways to enter Industry 4.0 careers, and to pursue further education, and (iv) Faculty Development – continuous improvement via professional development workshops and faculty development leaves. It is expected that this project will help define and chart-out the capabilities demanded from the next-generation workforce to fulfill the call of Industry 4.0, and the curricular ingredients necessary to train and empower them. This will help create an empowered workforce well-suited for Industry 4.0 careers in cyber-enabled smart manufacturing. The collaborative research team’s experience so far in starting up and establishing the project has further shed light on some of the essentials and practicalities needed for achieving the grand vision of enabling the manufacturing workforce for the future. Altogether, the experience and lessons learned during the year-one implementation has provided a better perception of what is needed for imparting a broader impact through this project. 
    more » « less
  4. The objective of this paper is to outline the details of a recently-funded National Science Foundation (NSF) Advanced Technological Education (ATE) project that aims to educate and enable the current and future manufacturing workforce to operate in an Industry 4.0 environment. Additionally, the startup procedures involved, the major ongoing activities during year-one, and preliminary impressions and lessons learned will be elaborated as well. Industry 4.0 refers to the ongoing reformation of advanced manufacturing (Operation Technologies - OT) enabled by advances in automation/data (Information Technologies - IT). Cyber-enabled smart manufacturing is a multidisciplinary approach that integrates the manufacturing process, its monitoring/control, data science, cyber-physical systems, and cloud computing to drive manufacturing operations. This is further propelled by the dissolution of boundaries separating IT and OT, presenting optimization opportunities not just at a machine-level, but at the plant/enterprise-levels. This so-called fourth industrial revolution is rapidly percolating the discrete and continuous manufacturing industry. It is therefore critical for the current and future US workforce to be cognizant and capable of such interdisciplinary domain knowledge and skills. To meet this workforce need, this project will develop curricula, personnel and communities in cyber-enabled smart manufacturing. The key project components will include: (i) Curriculum Road-Mapping and Implementation – one that integrates IT and OT to broaden the educational experience and employability via road-mapping workshops, and then to develop/implement curricula, (ii) Interdisciplinary Learning Experiences – through collaborative special-projects courses, industry internships and research experiences, (iii) Pathways to Industry 4.0 Careers – to streamline career pathways to enter Industry 4.0 careers, and to pursue further education, and (iv) Faculty Development – continuous improvement via professional development workshops and faculty development leaves. It is expected that this project will help define and chart-out the capabilities demanded from the next-generation workforce to fulfill the call of Industry 4.0, and the curricular ingredients necessary to train and empower them. This will help create an empowered workforce well-suited for Industry 4.0 careers in cyber-enabled smart manufacturing. The collaborative research team’s experience so far in starting up and establishing the project has further shed light on some of the essentials and practicalities needed for achieving the grand vision of enabling the manufacturing workforce for the future. Altogether, the experience and lessons learned during the year-one implementation has provided a better perception of what is needed for imparting a broader impact through this project. 
    more » « less
  5. Cybersecurity workforce development is the key to protecting information and information systems, and yet more than 30% of companies are short on security expertise. To address this need, the current authors have developed four cybersecurity education games to teach social engineering, secure online behavior, cyber defense methods, and cybersecurity first principles. These games are intended to recruit the next generation cybersecurity workforce by developing an innovative cybersecurity curriculum and pedagogical methods to provide high school students with hands-on activities in a game-based learning environment. Purdue University Northwest (PNW) offered high school summer camps for 181 high school students in June of 2016 and June of 2017. Out of 181 high school participants, 107 were underrepresented minority students, including African Americans, Hispanics, Asians, and Native Americans. To evaluate the effectiveness of the cybersecurity education games, post-camp surveys were conducted with 154 camp participants. The survey results indicated that the games were very effective in cybersecurity awareness training. Furthermore, the cybersecurity education games were more effective for male students than female students in raising student interest in computer science and cybersecurity. 
    more » « less