Full-spectrum information security education: integrating B.Sc., M.Sc., and Ph.D. programs

ABSTRACT

In this paper, we describe the content and rationale of a comprehensive information security program encompassing degree options at the B.Sc., M.Sc., and Ph.D. levels established at Gjøvik University College, Norway. While the individual programs are open for students meeting certain formal prerequisites at each level, the sequence of degree programs is also designed in such a way as to allow students to progress from B.Sc. to Ph.D. levels without undue overlap or repetition.

This is accomplished by placing different emphases on the teaching and learning tools and techniques used, moving on to higher levels in Bloom's hierarchy in the process. At the same time, the different degrees also take into account the career progression and concomitant changes in the needs of students. We describe these considerations along with a brief description of courses offered at each level, along with a description of the learning environments at each level.

REFERENCES

• 1: L. Anderson and D. R. Krathwohl, editors. A Taxonomy for Learning, Teaching and Assessing: A Revision of Bloom's Taxonomy of Educational Objectives. Longman, New York, NY, USA, 2001.
• 2: M. Bishop. Academia and education in information security: Four years later. In Proceedings of the 4th Colloquium for Information Systems Security Education, 2000.
• 3: B. S. Bloom and D. R. Krathwohl, editors. Taxonomy of Educational Objectives: The Classification of Educational Goals. Longmans, Green & Co., New York, NY, USA, 1956.
• 4: Chez Ciechanowicz , Keith M. Martin , Fred C. Piper , Matthew J. B. Robshaw, Ten years of information security masters programmes: reflections and new challenges, Security education and critical infrastructures, Kluwer Academic Publishers, Norwell, MA, 2003
• 5: CISR. Seventh workshop on education in computer security (wecs7). http://cisr.nps.edu/WECS7/. (Retrieved June 10. 2006).
• 6: CISSE. Colloquium for information systems security education. http://cisse.info. (Retrieved June 10. 2006).
• 7: Gregory Conti , John Hill , Scott Lathrop , Kenneth Alford , Daniel Ragsdale, A comprehensive undergraduate information assurance program, Security education and critical infrastructures, Kluwer Academic Publishers, Norwell, MA, 2003
• 8: Deborah Frincke , Matt Bishop, Joining the Security Education Community, IEEE Security and Privacy, v.2 n.5, p.61-63, September 2004 [doi>10.1109/MSP.2004.75]
• 9: M. Hentea, H. S. Dhillon, and M. Dhillon. Towards changes in information security education. Journal of Information Technology Education, 5:221--233, 2006.
• 10: C. E. Irvine and H. L. Armstrong, editors. Security Education and Critical Infrastructures, IFIP TC11 / WG11.8 Third Annual World Conference on Information Security Education (WISE3), June 26--28, 2003, Monterey, California, USA. Kluwer, 2003.
• 11: N. P. Schembari. A bachelor of science degree in computer security: The experiences of a national center of academic excellence in information assurance education. In Proceedings of the 9th Colloquium for Information Systems Security Education, pages 6--11, 2005.
• 12: C. Taylor, R. Shumba, and J. Walden. Computer security education: Past, present and future. In Proceedings of the Seventh Workshop on Education in Computer Security (WECS7), pages 67--78, 2006.
• 13: Proceedings of the 2nd annual conference on Information security curriculum development, September 2005
• 14: M. E. Whitman and H. J. Mattord. A (draft) model curriculum for programs of study in information security and assurance. http://infosec.kennesaw.edu/presentations/InfoSecCurriculumModel.pdf. (Retrieved June 10. 2006).
• 15: Michael E. Whitman , Herbert J. Mattord, Designing and teaching information security curriculum, Proceedings of the 1st annual conference on Information security curriculum development, October 08-08, 2004, Kennesaw, Georgia [doi>10.1145/1059524.1059526]
• 16: Proceedings of the 1st annual conference on Information security curriculum development, October 2004

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.3 COMPUTERS AND EDUCATION
      K.3.2 Computer and Information Science Education
          Subjects: Curriculum

General Terms:
Security

Keywords:
curriculum development, information security