技术增强型桌面演练在网络安全教育中的应用：经验教训
Technology-Enhanced Tabletop Exercises for Cybersecurity Education: Lessons Learned
浏览论文内容
中文总结 AI 辅助
该研究将技术增强型桌面演练（TTXs）融入网络安全教育，借助INJECT演练平台（IXP）开展25次演练，总结24条经验，证实数字TTXs是可扩展的团队协作问题解决教学模型。
中文摘要 AI 辅助
本创新实践全文研究将技术增强型桌面演练（TTXs）融入计算机教育，重点关注网络安全课程。其动机是让学生更好地为事件响应和IT治理中典型的复杂协作问题解决做好准备，而协调、沟通和及时决策至关重要。尽管TTXs在专业实践中已成熟，但在大学中仍未得到充分利用。我们通过INJECT演练平台（IXP）解决这一差距，IXP是一个基于网络的环境，可自动处理场景流程并支持数据驱动评估。本实践采用IXP自动推送场景更新、促进团队讨论并收集交互数据以支持自动化评估，这种组合增强了真实性、减轻了教师工作量并提供了关于学生学习的可操作见解。2024年至2026年，我们在多门大学课程和课外活动中开展了25次演练，共有743名参与者。我们观察到学生的参与度和协作有所提高，教师对团队如何应对复杂场景也有了更清晰的了解。本文分享了从这些演练中获得的24条经验教训，教师和课程设计者可从整合技术增强型TTXs的具体指导中受益。我们证明数字TTXs为网络安全课程及其他需要团队协作解决问题的课程提供了可扩展且可复制的模型。
英文摘要
This innovative practice full paper examines the integration of technology-enhanced tabletop exercises (TTXs) into computing education, focusing on cybersecurity curricula. The motivation is to better prepare students for complex, collaborative problem solving typical of incident response and IT governance, where coordination, communication, and timely decision-making are essential. Although TTXs are well-established in professional practice, they remain underused in universities. We address this gap by augmenting TTX delivery and evaluation through the INJECT Exercise Platform (IXP), a web-based environment that automates scenario flow and enables data-driven assessment. Our practice implements IXP to automatically deliver scenario updates, facilitate team discussions, and collect interaction data to support automated assessment. This combination enhances realism, reduces instructor workload, and provides actionable insight into student learning. From 2024 to 2026, we ran 25 exercises with 743 participants in multiple university courses and extracurricular events. We observed increased engagement and collaboration among students, and clearer visibility for instructors into how teams navigate complex scenarios. This paper shares 24 lessons learned from these exercises. Instructors and curriculum designers may benefit from concrete guidance for integrating technology-enhanced TTXs. We demonstrate that digital TTXs provide a scalable and replicable model for cybersecurity courses and others requiring team-based problem-solving.
