引入系统思维作为教授和评估威胁建模能力的框架
Introducing Systems Thinking as a Framework for Teaching and Assessing Threat Modeling Competency
AI总结：
针对现有威胁建模教学侧重组件级分析且缺乏评估标准的问题，提出将系统思维与STRIDE框架结合，开发了两种评分标准并验证了其能帮助学生识别和缓解系统级威胁。
摘要：
计算系统面临着多样且严重的网络安全威胁。为了缓解这些网络安全威胁，软件工程师需要具备熟练的威胁建模技能。在工业界和学术界，有许多用于教授威胁建模的框架，但我们对这些框架的分析表明：（1）这些方法往往侧重于组件级分析，而不是教育学生对系统的网络安全进行整体推理；（2）目前没有用于评估学生威胁建模能力的评分标准。为了解决这些问题，我们提议将系统思维与流行且符合行业标准的威胁建模框架（如 STRIDE）结合使用，用于教授和评估威胁建模能力。先前的研究表明，像系统思维这样的整体方法有助于理解和缓解网络安全威胁。因此，我们开发并试点了两种新颖的评分标准——一种用于评估 STRIDE 威胁建模表现，另一种用于评估在进行 STRIDE 时的系统思维表现。为了开展这项研究，我们试点应用了上述两种评分标准，以评估在 2021 年秋季、2023 年春季和 2023 年秋季于 Purdue University 选修高级软件工程课程的学生的威胁模型制品。同时接受过系统思维和 STRIDE 指导的学生能够识别并尝试缓解组件级以及系统级的威胁。仅接受过 STRIDE 指导的学生往往侧重于识别和缓解组件级威胁，而忽视了系统级威胁。我们对工程教育的贡献在于：（1）描述了一种基于系统思维评估威胁建模的新评分标准；（2）识别了学生威胁建模方法中的趋势和盲点；（3）展望了将系统思维整合到威胁建模教学与评估中的益处。
英文摘要：
Computing systems face diverse and substantial cybersecurity threats. To mitigate these cybersecurity threats, software engineers need to be competent in the skill of threat modeling. In industry and academia, there are many frameworks for teaching threat modeling, but our analysis of these frameworks suggests that (1) these approaches tend to be focused on component-level analysis rather than educating students to reason holistically about a system's cybersecurity, and (2) there is no rubric for assessing a student's threat modeling competency. To address these concerns, we propose using systems thinking in conjunction with popular and industry-standard threat modeling frameworks like STRIDE for teaching and assessing threat modeling competency. Prior studies suggest a holistic approach, like systems thinking, can help understand and mitigate cybersecurity threats. Thus, we developed and piloted two novel rubrics - one for assessing STRIDE threat modeling performance and the other for assessing systems thinking performance while conducting STRIDE. To conduct this study, we piloted the two rubrics mentioned above to assess threat model artifacts of students enrolled in an upper-level software engineering course at Purdue University in Fall 2021, Spring 2023, and Fall 2023. Students who had both systems thinking and STRIDE instruction identified and attempted to mitigate component-level as well as systems-level threats. Students with only STRIDE instruction tended to focus on identifying and mitigating component-level threats and discounted system-level threats. We contribute to engineering education by: (1) describing a new rubric for assessing threat modeling based on systems thinking; (2) identifying trends and blindspots in students' threat modeling approach; and (3) envisioning the benefits of integrating systems thinking in threat modeling teaching and assessment.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
