Opening a window onto high school cybersecurity education

Yang Wang
Yang Wang, Associate Professor

How can current and future generations help to ensure that technologies are created and used ethically? One way is effectively teaching students about cybersecurity and AI ethics. Associate Professor of Information Sciences Yang Wang and colleagues from the University of Illinois and other universities are interested in the topic and have been conducting research into how to improve instruction. Notably, their research team also has two high school students.

In online interviews, 16 U.S. high school teachers and several high school students shared their experiences in teaching and learning cybersecurity and AI ethics.

Findings about what topics high school teachers cover, the strategies and resources they use, and challenges they encounter were released in their paper, "How technical do you get? I’m an English teacher": Teaching and Learning Cybersecurity and AI Ethics in High School.

The research is set for presentation at a premier international conference on computer security in early 2023. [IEEE Symposium on Security and Privacy 2023]

A fundamental goal of cybersecurity ethics education is to prepare future decision-makers in the realm of cybersecurity. "This is an area where multiple ethical frameworks converge on issues including fairness, balancing the ‘good’ versus harm or risk, and the protection of innocent parties," the researchers noted.

Teachers shared their struggles to inspire "an appropriate level of awareness and concern in their students in topics like cyber hygiene, personal autonomy, and data privacy." Many teachers in the study described students’ overconfidence in their own ability to spot threats. Teachers also expressed that their students lacked awareness regarding online information, which can leave a person vulnerable to mis- and disinformation.

Teachers varied in their opinions about the reasons behind their observations. While some pointed to naivety, one teacher said:

"I think that's something that takes a lot of time and understanding to develop, to think about how you participate within systems and how systems influence you [...]. That's a developmental thing. I don't think it's naive."

Wang and colleagues concluded that their initial study demonstrates a need for more and better-quality cybersecurity/AI ethics instruction and that more research is needed to investigate their findings with larger samples and across broader swaths of the U.S. educational system.

Further, they recommend that "it would also be helpful to delve further into how teachers can best introduce AI/CS ethics into already-packed curricula."

Wang and colleagues point to the fact that much current cyber education is grounded in 'don't-do-this-isms'. And that students seem to immediately tune out such messages. Not wanting to be lectured to by adults is one reasonable explanation for a certain level of apathy.

Provide more tools for teachers and make them integratable

Wang explained that from the interviewed teachers' perspective, a common theme was a lack of tools or of support to allow teachers to cover cyber hygiene. While some cybersecurity education resources exist, it takes time to discover them. And then once discovered, it often is not easy for educators to incorporate them into curriculum.

Make it relatable and include students in the teaching

Wang explained that his colleagues are working on the next phase of research, which is helping to create the resources teachers want and students will engage with.

They conducted a workshop at a local high school where they designed a set of hands-on labs to educate students about privacy and security issues. Students were asked to create a public announcement or a short summary of a cybersecurity issue.

"It was fun to see students create different announcements. Evaluations afterwards showed that the students liked that activity. They had to use what they learned and then present it themselves. Only if you can teach something, does it show you understand it. Students know the ways that the content will be engaging for their peers," Wang said.

"Teachable moments" can make a difference

"Our university is doing a great job creating a lot of education materials and short lessons. However, I think a lot of times people brush the ideas away because cybersecurity's not a main concern in their daily life. When you go online your main task might be making a purchase, etc.," Wang said.

Wang explained that there are some very good materials that train college students, yet they are usually for students in the STEM field.

"Arguably each student should have an awareness of these issues. The challenge is how to educate students in disciplines who don’t take computer classes," he noted.

Wang believes what he and his colleagues learned from their work can be applicable to colleges. Teachers like to use recent events to illustrate things. Resources that allow teachers to easily use recent events as a springboard will be a good technique, he noted.

Wang teaches classes in computer security and in user experience and data science, and as he has started to mention current events in his instruction it catches people's attention. "It's a way to bring up these issues in non-CS classes. I use examples from this research [the examples that high schoolers created] in my own teaching. Students then immediately know what I am talking about." he explained.

"Think about teachable moments. When cybersecurity events happen in the world, people are more likely to spend time on them. When you deliver and how you deliver them can build on real world events. That’s a good strategy," he said.

Updated on
Backto the news archive

Related News

iSchool researchers to present at IDCC24

iSchool faculty, staff, and students will present their research in transparent data curation and cleaning, provenance management, certified transparency, and data ethics at the 18th International Digital Curation Conference (IDCC24), which will be held from February 19-21 in Edinburgh, Scotland. The theme of this year's conference, which brings together individuals, organizations, and institutions across all disciplines and domains involved in curating data, is "Trust Through Transparency."

Adler and Naiman selected for 2024 NIH Grant Writing Series program

Associate Professor Rachel Adler and Teaching Assistant Professor Jill Naiman have been selected for the 2024 National Institutes of Health (NIH) Grant Writing Series program in the Interdisciplinary Health Sciences Institute (IHSI). Led by faculty who have demonstrated a history of success with NIH proposals, the biennial NIH Grant Writing Series is designed to prepare Illinois faculty to submit their first R01 or other individual investigator proposals to the NIH.

Sun selected as 2024 PTC Emerging Scholar

Assistant Professor Meicen Sun was selected as a 2024 Pacific Telecommunications Council (PTC) Emerging Scholar and presented her research at the PTC Annual Conference, which was held from January 21-24 in Honolulu, Hawaii. PTC is a global, nonprofit organization promoting the advancement of information and communication technologies (ICT) in the Pacific Rim. 

Meicen Sun

Hoiem authors new book on education of things

Assistant Professor Elizabeth Hoiem has authored a new book on how children learned about the material world at the close of the eighteenth century. The Education of Things, Mechanical Literacy in British Children's Literature, 1762-1860, funded in part by a fellowship from the National Endowment for the Humanities, was recently published by the University of Massachusetts Press.

Elizabeth Hoiem