Contextual integration: a framework for presenting social, legal, and ethical content across the computer security and information assurance curriculum

ABSTRACT

The computer security and information assurance (CSIA) curriculum framework introduced in this paper presents technical computer security issues in terms of their social, legal, and ethical context. This approach to CSIA education fosters ethical reasoning by connecting skills and knowledge of technical and contextual content to real world situations; applying ethical reasoning when assessing CSIA problems and potential CSIA solutions in multiple settings; and framing the ethical dilemmas or competing value systems which are intrinsically a part of implementing CSIA technologies. Initial implementation of this integrative framework occurred at Marymount University in an introductory graduate-level computer security course, which is the first in a series of courses based on this model. Preliminary results from that pilot course are presented with a list of the resulting challenges that will be addressed in subsequent course offerings.

REFERENCES

• 1: Ronald E. Anderson , Deborah G. Johnson , Donald Gotterbarn , Judith Perrolle, Using the new ACM code of ethics in decision making, Communications of the ACM, v.36 n.2, p.98-107, Feb. 1993 [doi>10.1145/151220.151231]
• 2: Anne G. Applin, A learner-centered approach to teaching ethics in computing, Proceedings of the 37th SIGCSE technical symposium on Computer science education, March 03-05, 2006, Houston, Texas, USA
• 3: Association for Computing Machinery. Computing Curricula 2001. J. Educ. Resour. Comput., 1, 3es (Fall 2001), 1--240.
• 4: Association for Computing Machinery, ACM Code of Ethics and Professional Conduct. http://www.acm.org.proxymu.wrlc.org/constitution/code.html, last accessed June, 2006.
• 5: Association of American Colleges and Universities and the Carnegie Foundation for the Advancement of Teaching, Statement on Integrative Learning. http://www.aacu-edu.org/integrative_learning/pdfs/ILP_Statement.pdf, last accessed June, 2006.
• 6: Richard J. Botting, Teaching and learning ethics in computer science: walking the walk, Proceedings of the 36th SIGCSE technical symposium on Computer science education, February 23-27, 2005, St. Louis, Missouri, USA
• 7: Bowyer, K. W. Pornography on the Dean's PC: An Ethics and Computing Case Study. Journal of Information Systems Education (JISE), 11, 3-4 (Summer-Fall 2000), 121--126.
• 8: Bransford, J. D., Brown, A. L., and Cocking, R. R., Eds. How People Learn: Brain, Mind, Experience and School. National Academy of Science Press, Washington, DC, 2000.
• 9: Brown, J. S., Collins, A., and Duguid, P. Situated cognition and the culture of learning. In Situated Learning Perspectives. McLellan, H., Ed. Educational Technology Publications, Englewood Cliffs, NJ, 1996, pp. 19--44.
• 10: Mary Elaine Califf , Mary Goodwin, Effective incorporation of ethics into courses that focus on programming, Proceedings of the 36th SIGCSE technical symposium on Computer science education, February 23-27, 2005, St. Louis, Missouri, USA
• 11: Cicalese, C. and DeWitt, J. Securing cyberspace: The challenge of infusing ethics. 6th International Conference on Ethics Across the Curriculum (Corvallis, Oregon, October, 2004).
• 12: Cynthia Cicalese , Janine DeWitt , C. Dianne Martin, Ethics across the computer science curriculum, Proceedings of the 43rd annual Southeast regional conference, March 18-20, 2005, Kennesaw, Georgia [doi>10.1145/1167350.1167358]
• 13: Colby, A., Ehrlich, T., Beaumont, E., and Stephens, J. Educating Citizens: Preparing America's Undergraduates for Lives of Moral and Civic Responsibility. Jossey-Bass, 2003.
• 14: Collins, A., Brown, J. S., and Holum, A. Cognitive Apprenticeship: Making Thinking Visible. American Educator, 1991.
• 15: Committee on National Security Systems, National Information Assurance Training Standard for Risk Analysts. CNSS Instruction No. 4016, 2005. http://www.cnss.gov/Assets/pdf/CNSSI-4016.PDF, last accessed June, 2006.
• 16: Dark, M. J., Epstein, R., Morales, L., Countermine, T., Yuan, Q., Ali, M., Rose, M., and Harter, N. A framework for information security ethics education. In Proceedings of the 10th Colloquium for Information Systems Security Education (Adelphi, Maryland, June 5--8, 2006). 2006, 109--115.
• 17: Melissa J. Dark , Jeanne Winstead, Using educational theory and moral psychology to inform the teaching of ethics in computing, Proceedings of the 2nd annual conference on Information security curriculum development, September 23-24, 2005, Kennesaw, Georgia [doi>10.1145/1107622.1107630]
• 18: Davis, M. Ethics and the University. Routledge, New York, NY, 1999.
• 19: DeWitt, J. and Oxenford, C. Using case studies to promote ethical reasoning: Insights from psychology & sociology. 6th International Conference on Ethics Across the Curriculum (Corvallis, Oregon, October, 2004).
• 20: Richard G. Epstein, An ethics and security course for students in computer science and information technology, Proceedings of the 37th SIGCSE technical symposium on Computer science education, March 03-05, 2006, Houston, Texas, USA
• 21: Etzioni, A. The good society. Seattle Journal of Social Justice, 1, 1 (Spring/Summer 2002), 83--96.
• 22: Tony Greening , Judy Kay , Bob Kummerfeld, Integrating ethical content into computing curricula, Proceedings of the sixth conference on Australasian computing education, p.91-99, January 01, 2004, Dunedin, New Zealand
• 23: Haidt, J. The Emotional Dog and Its Rational Tail: A Social Intuitionist Approach to Moral Judgment. Psychological Review, 108, 4 (October 2001), 814--834.
• 24: Susan Hansche , John Berti , Chris Hare, Official (ISC)2 Guide to the CISSP Exam, Auerbach Publications, Boston, MA, 2004
• 25: Hoffman, L., Cicalese, C., DeWitt, J., and Rosenberg, T. An integrated approach to computer security instruction using case study modules and A portable network laboratory. 4th World Conference on Information Security Education (Moscow, Russia, May, 2005).
• 26: Chuck Huff , C. Dianne Martin, Computing consequences: a framework for teaching ethical computing, Communications of the ACM, v.38 n.12, p.75-84, Dec. 1995 [doi>10.1145/219663.219687]
• 27: Huff, C. and Frey, W. Moral pedagogy and practical ethics. Science and Engineering Ethics, 11, 3 (July 2005), 389--408.
• 28: Johnson, M. Moral Imagination: Implications of Cognitive Science for Ethics. The University of Chicago Press, Chicago, IL, 1993.
• 29: King, P. M. and Kitchener, K. S. Developing Reflective Judgment. Jossey-Bass, New York, NY, 1994.
• 30: Liska, J. Moral Competence: An Integrated Approach to the Study of Ethics. Prentice Hall, 2002.
• 31: Lisman, C. D. The Curricular Integration of Ethics: Theory and Practice. Praeger, Westport, CT, 1996.
• 32: Patricia Y. Logan , Allen Clarkson, Teaching students to hack: curriculum issues in information security, Proceedings of the 36th SIGCSE technical symposium on Computer science education, February 23-27, 2005, St. Louis, Missouri, USA
• 33: Margolis, J. and Fisher, A. Unlocking the Clubhouse: Women in Computing. MIT Press, 2002.
• 34: C. Dianne Martin , Chuck Huff , Donald Gotterbarn , Keith Miller, Implementing a tenth strand in the CS curriculum, Communications of the ACM, v.39 n.12, p.75-84, Dec. 1996 [doi>10.1145/240483.240499]
• 35: C. Dianne Martin , Elaine Yale Weltz, From awareness to action: integrating ethics and social responsibility into the computer science curriculum, ACM SIGCAS Computers and Society, v.29 n.2, p.6-14, June 1999 [doi>10.1145/382018.382028]
• 36: Martha Myers , Amy Woszczynski , Sherri Shade, Opportunities for women in IT security, Proceedings of the 2005 ACM SIGMIS CPR conference on Computer personnel research, April 14-16, 2005, Atlanta, Georgia, USA [doi>10.1145/1055973.1055981]
• 37: Paul, R. and Elder, L. The Miniature Guide to Understanding the Foundations of Ethical Reasoning. 3rd ed., Foundation for Critical Thinking, 2005.
• 38: Charles P. Pfleeger , Shari Lawrence Pfleeger, Security in Computing, Prentice Hall Professional Technical Reference, 2002
• 39: Vance E. Poteat, Classroom ethics: hacking and cracking, Journal of Computing Sciences in Colleges, v.20 n.3, p.225-231, February 2005
• 40: Michael J. Quinn, Case-based analysis: a practical tool for teaching computer ethics, Proceedings of the 37th SIGCSE technical symposium on Computer science education, March 03-05, 2006, Houston, Texas, USA
• 41: Rest, J. Morality. In Handbook of Child Psychology: Cognitive Development. 4th ed., Mussen, P. H., Flavell, J. and Markham, E., Eds. Wiley, New York, NY, 1983, pp. 556--629.
• 42: Alton F. Sanders, A discussion format for computer ethics, Proceedings of the 36th SIGCSE technical symposium on Computer science education, February 23-27, 2005, St. Louis, Missouri, USA
• 43: Thomas S. J. Schwarz, Teaching ethics and computer forensics: the Markkula center for applied ethics approach, Proceedings of the 2nd annual conference on Information security curriculum development, September 23-24, 2005, Kennesaw, Georgia [doi>10.1145/1107622.1107637]
• 44: Stein, D., Situated Learning in Adult Education. ERIC Digest no. 195. ED418250, 1998. http://www.eric.ed.gov/ERICDocs/data/ericdocs2/content_storag e_01/0000000b/80/2a/2b/04.pdf, last accessed June, 2006.
• 45: Kevin Streff , Zehai Zhou, Developing and enhancing a computer and network security curriculum, Journal of Computing Sciences in Colleges, v.21 n.3, p.4-18, February 2006
• 46: Herman T. Tavani, Ethics and Technology: Ethical Issues in an Age of Information and Communication Technology, John Wiley & Sons, Inc., New York, NY, 2006
• 47: Wenger, E. Communities of Practice: Learning, Meaning and Identity. Cambridge University Press, New York, NY, 1998.
• 48: Laurie Werner, Teaching principled and practical information security, Journal of Computing Sciences in Colleges, v.20 n.1, p.81-89, October 2004
• 49: James A. Whittaker , Richard Ford, How to Think about Security, IEEE Security and Privacy, v.4 n.2, p.68-71, March 2006 [doi>10.1109/MSP.2006.39]
• 50: Tom Wulf, Teaching ethics in undergraduate network security courses: the cautionary tale of Randal Schwartz, Journal of Computing Sciences in Colleges, v.19 n.1, p.90-93, October 2003

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.3 COMPUTERS AND EDUCATION
      K.3.2 Computer and Information Science Education

General Terms:
Security

Keywords:
active learning, authentic learning, case studies, cognitive apprenticeship, computer security, curriculum, education, ethical reasoning, ethics, information assurance, integrative learning, situated learning, social context