Practical Cyber Security Exercises for the Undergraduate Syllabus
For UK Universities, the BCS Guidelines on course accreditation (Appendix 1) require students to show knowledge and understanding of cyber security in five themes:
Of course, technical exercises alone will not meet these learning outcomes, but they can contribute usefully to the teaching and to student engagement. The exercises are essentially technical so they contribute little to the management category, the table below compares the BCS themes with the current cyber-practicals exercises. Inside the matrix is the type of subject or module in which the combination might be included.
|
Information and Risk |
Threats and Attacks |
Architecture and Operations |
Secure Systems |
SQL Injection |
|
Database |
|
Web Programming |
Information via Inference |
Database |
|
|
|
Input sanitisation & CSS |
|
Network |
|
Web Programming |
Exploiting Errors |
Error Sidechannel |
|
Program Error Handling |
|
Exploiting Software |
|
Compilers |
|
Testing |
Digital Forensics |
|
|
Incident Response |
|
Storing passwords |
|
|
System Architecture & Authentication |
|
Random numbers |
Information Theory |
|
|
Programming Fundamentals |
Information and Info leakage |
Information Theory |
|
|
|
Cryptography & Integrity |
|
|
Protocols Cryptography |
|
Encryption modes |
|
|
Cryptography |
|