Exploring How Students Solve Open-ended Assignments: A Study of SQL Injection Attempts in a Cybersecurity Course

Charles Koutcheme, Artturi Tilanterä, Aleksi Peltonen, Arto Hellas, Lassi Haaranen

Tutkimustuotos: Artikkeli kirjassa/konferenssijulkaisussaConference article in proceedingsScientificvertaisarvioitu

66 Lataukset (Pure)

Abstrakti

Research into computing and learning how to program has been ongoing for decades. Commonly, this research has been focused on novice learners and the difficulties they encounter, especially during CS1. Cybersecurity is a critical aspect in computing - as a topic in university education as well as a core skill in the industry. In this study, we investigate how students solve open-ended assignments on a cybersecurity course offered to university students after two years of CS studies. Specifically, we looked at how students perform SQL injection attacks on an web application system, and study to what extent we can characterize the process in which they come up with successful injections. Our results show that there are distinguishable strategies used by individual students who seek to hack the system, where these approaches revolve around exploration and exploitation tactics. We also find evidence of learning due to a more pronounced use of exploitation in a subsequent similar assignment.

AlkuperäiskieliEnglanti
OtsikkoITiCSE 2022 - Proceedings of the 27th ACM Conference on Innovation and Technology in Computer Science Education
KustantajaACM
Sivut75-81
Sivumäärä7
ISBN (elektroninen)978-1-4503-9201-3
DOI - pysyväislinkit
TilaJulkaistu - 7 heinäk. 2022
OKM-julkaisutyyppiA4 Artikkeli konferenssijulkaisussa
TapahtumaAnnual Conference on Innovation and Technology in Computer Science Education - University College Dublin, Dublin, Irlanti
Kesto: 8 heinäk. 202213 heinäk. 2022
Konferenssinumero: 27
https://iticse.acm.org/2022/

Julkaisusarja

NimiAnnual Conference on Innovation and Technology in Computer Science Education, ITiCSE
KustantajaACM
Vuosikerta1
ISSN (painettu)1942-647X

Conference

ConferenceAnnual Conference on Innovation and Technology in Computer Science Education
LyhennettäITiCSE
Maa/AlueIrlanti
KaupunkiDublin
Ajanjakso08/07/202213/07/2022
www-osoite

Sormenjälki

Sukella tutkimusaiheisiin 'Exploring How Students Solve Open-ended Assignments: A Study of SQL Injection Attempts in a Cybersecurity Course'. Ne muodostavat yhdessä ainutlaatuisen sormenjäljen.

Siteeraa tätä