Research into the Aspects of Cybersecurity Education in Higher Education

The importance of cybersecurity has increased due to the digitalization of society. In the last 10 years, the Finnish Cybersecurity Strategy has been released twice in 2013 and 2019. The newest cybersecurity strategy states as its third chapter the development of cybersecurity competence within soci...

Full description

Bibliographic Details
Main Author: Saharinen, Karo
Other Authors: Faculty of Information Technology, Informaatioteknologian tiedekunta, University of Jyväskylä, Jyväskylän yliopisto
Format: Doctoral dissertation
Language:eng
Published: 2023
Online Access: https://jyx.jyu.fi/handle/123456789/86248
_version_ 1826225505173504000
author Saharinen, Karo
author2 Faculty of Information Technology Informaatioteknologian tiedekunta University of Jyväskylä Jyväskylän yliopisto
author_facet Saharinen, Karo Faculty of Information Technology Informaatioteknologian tiedekunta University of Jyväskylä Jyväskylän yliopisto Saharinen, Karo Faculty of Information Technology Informaatioteknologian tiedekunta University of Jyväskylä Jyväskylän yliopisto
author_sort Saharinen, Karo
datasource_str_mv jyx
description The importance of cybersecurity has increased due to the digitalization of society. In the last 10 years, the Finnish Cybersecurity Strategy has been released twice in 2013 and 2019. The newest cybersecurity strategy states as its third chapter the development of cybersecurity competence within society. To amend the strategy, an implementation plan was released for the years 2017–2019, and a development program was released in 2021. The first theme of the development program is to ensure top class knowledge and development of cyber security education in Finland. During this time period, several degree programmes concentrating on cybersecurity have been established in Finland. In vocational education, the basic degree in Information and Communication Technology has been updated to contain the maintenance of cybersecurity as an elective module. In addition, several other steps have been taken to increase the knowledge around cybersecurity nationally. This study concentrates on researching cybersecurity education from different perspectives. The study was scoped into cybersecurity education within the higher education institutions. The goal was to find and establish solid fundamentals on which the competences, knowledge, and skills, could be based. Viewpoints on national cybersecurity education were also researched internationally by comparing cybersecurity degrees abroad through a unified analysis framework. The research also included theses done within these degree programmes as well as graduate employment. When vocational education was updated to include cybersecurity, the decision was made to research how the industry needed the competences developed there. As a conclusion, the framework chosen within this research was deemed valid for curriculum development and as an analysis tool for several aspects of cybersecurity education. This research also verified what kind of education would be most beneficial for a student focusing on cybersecurity. The dissertation also provides data and researched viewpoints to curriculum developers on how and what to establish their competence structure in degree programmes focusing on cybersecurity. Keywords: cybersecurity, cybersecurity education, pedagogy Yhteiskunnan digitalisoituessa on kyberturvallisuuden tärkeys yhteiskunnassa noussut merkittävästi. Viimeisessä kymmenessä vuodessa Suomen kyberturvallisuusstrategia on julkaistu kahdesti; vuosina 2013 ja 2019. Uusimman kyberturvallisuusstrategian kolmantena kohtana on kyberturvallisuuden osaamisen kehittäminen yhteiskunnassa. Strategian täydennykseksi on julkaistu toimeenpano-ohjelma vuosille 2017–2019 ja viimeisimpänä kehittämisohjelma 2021. Kehittämisohjelmassa puolestaan ensimmäisenä kohtana on huippuluokan osaaminen ja toisena kohtana kyberturvallisuuden koulutuksen kehittäminen. Tänä aikana on Suomen korkeakouluihin perustettu tutkinto-ohjelmia, jotka keskittyvät kyberturvallisuuteen. Ammatilliseen tieto ja-viestintätekniikan perustutkintoon on tullut kyberturvallisuuden ylläpitäminen valinnaiseksi tutkinnon osaksi. Näiden lisäksi on useita muita avauksia tehty kansakunnan kyberturvallisuuden tietotason nostamiseksi. Tässä väitöksessä tutkitaan kyberturvallisuuden koulutusta eri näkökulmista. Tutkimuksen rajauksena oli korkeakouluissa toteutettava kyberturvallisuuden koulutus. Tutkimuksen tavoitteena oli löytää soveltuvat perusteet, johon kyberturvallisuuden tutkintokoulutuksen kompetenssit sekä kehitettävät tie-dot ja taidot pohjataan. Vertailukohtia kansalliseen kyberturvallisuuskoulutukseen haettiin myös ulkomaalaisten tutkintokoulutusten sisällöistä vertailemalla niitä yhtenevällä viitekehyksellä Suomessa toteutettavaan koulutukseen. Tutkimuksessa läpikäytiin myös tutkinto-ohjelmista tehtäviä opinnäytetöitä, sekä valmistuneiden sijoittumista työelämään. Ammatillisen tason tutkinnonperusteiden päivityttyä sisältämään kyberturvallisuutta, päätettiin myös tutkia sen osaamiskuvauksien tarvetta teollisuudessa. Johtopäätöksenä todettiin, että käytetty viitekehys osoittautui päteväksi tutkinto-ohjelman kehityksessä, ja analysoinnin työkaluna eri osa-alueisiin kyberturvallisuuden opetuksessa. Tutkimuksen perusteella voitiin vahvistaa mitkä osa-alueet kyberturvallisuuden opetuksesta olisivat opiskelijalle hyödyllisimpiä. Tämän tutkimuksen perusteella kyberturvallisuuden tutkinto-ohjelmia suunnittelevat henkilöt voivat paremmin pohjustaa miten ja kuinka perustaa tutkinto-ohjelmansa kompetenssirakenteen. Avainsanat: kyberturvallisuus, kyberturvallisuuskoulutus, pedagogiikka
first_indexed 2023-04-04T20:00:47Z
format Väitöskirja
free_online_boolean 1
fullrecord [{"key": "dc.contributor.author", "value": "Saharinen, Karo", "language": null, "element": "contributor", "qualifier": "author", "schema": "dc"}, {"key": "dc.date.accessioned", "value": "2023-04-03T13:43:30Z", "language": null, "element": "date", "qualifier": "accessioned", "schema": "dc"}, {"key": "dc.date.available", "value": "2023-04-03T13:43:30Z", "language": null, "element": "date", "qualifier": "available", "schema": "dc"}, {"key": "dc.date.issued", "value": "2023", "language": null, "element": "date", "qualifier": "issued", "schema": "dc"}, {"key": "dc.identifier.isbn", "value": "978-951-39-9511-9", "language": null, "element": "identifier", "qualifier": "isbn", "schema": "dc"}, {"key": "dc.identifier.uri", "value": "https://jyx.jyu.fi/handle/123456789/86248", "language": null, "element": "identifier", "qualifier": "uri", "schema": "dc"}, {"key": "dc.description.abstract", "value": "The importance of cybersecurity has increased due to the digitalization of society. In the last 10 years, the Finnish Cybersecurity Strategy has been released twice in 2013 and 2019. The newest cybersecurity strategy states as its third chapter the development of cybersecurity competence within society. To amend the strategy, an implementation plan was released for the years 2017\u20132019, and a development program was released in 2021. The first theme of the development program is to ensure top class knowledge and development of cyber security education in Finland. \nDuring this time period, several degree programmes concentrating on cybersecurity have been established in Finland. In vocational education, the basic degree in Information and Communication Technology has been updated to contain the maintenance of cybersecurity as an elective module. In addition, several other steps have been taken to increase the knowledge around cybersecurity nationally. \nThis study concentrates on researching cybersecurity education from different perspectives. The study was scoped into cybersecurity education within the higher education institutions. The goal was to find and establish solid fundamentals on which the competences, knowledge, and skills, could be based. Viewpoints on national cybersecurity education were also researched internationally by comparing cybersecurity degrees abroad through a unified analysis framework. The research also included theses done within these degree programmes as well as graduate employment. When vocational education was updated to include cybersecurity, the decision was made to research how the industry needed the competences developed there. \nAs a conclusion, the framework chosen within this research was deemed valid for curriculum development and as an analysis tool for several aspects of cybersecurity education. This research also verified what kind of education would be most beneficial for a student focusing on cybersecurity. The dissertation also provides data and researched viewpoints to curriculum developers on how and what to establish their competence structure in degree programmes focusing on cybersecurity. \nKeywords: cybersecurity, cybersecurity education, pedagogy", "language": "en", "element": "description", "qualifier": "abstract", "schema": "dc"}, {"key": "dc.description.abstract", "value": "Yhteiskunnan digitalisoituessa on kyberturvallisuuden t\u00e4rkeys yhteiskunnassa noussut merkitt\u00e4v\u00e4sti. Viimeisess\u00e4 kymmeness\u00e4 vuodessa Suomen kyberturvallisuusstrategia on julkaistu kahdesti; vuosina 2013 ja 2019. Uusimman kyberturvallisuusstrategian kolmantena kohtana on kyberturvallisuuden osaamisen kehitt\u00e4minen yhteiskunnassa. Strategian t\u00e4ydennykseksi on julkaistu toimeenpano-ohjelma vuosille 2017\u20132019 ja viimeisimp\u00e4n\u00e4 kehitt\u00e4misohjelma 2021. Kehitt\u00e4misohjelmassa puolestaan ensimm\u00e4isen\u00e4 kohtana on huippuluokan osaaminen ja toisena kohtana kyberturvallisuuden koulutuksen kehitt\u00e4minen.\nT\u00e4n\u00e4 aikana on Suomen korkeakouluihin perustettu tutkinto-ohjelmia, jotka keskittyv\u00e4t kyberturvallisuuteen. Ammatilliseen tieto ja-viestint\u00e4tekniikan perustutkintoon on tullut kyberturvallisuuden yll\u00e4pit\u00e4minen valinnaiseksi tutkinnon osaksi. N\u00e4iden lis\u00e4ksi on useita muita avauksia tehty kansakunnan kyberturvallisuuden tietotason nostamiseksi.\nT\u00e4ss\u00e4 v\u00e4it\u00f6ksess\u00e4 tutkitaan kyberturvallisuuden koulutusta eri n\u00e4k\u00f6kulmista. Tutkimuksen rajauksena oli korkeakouluissa toteutettava kyberturvallisuuden koulutus. Tutkimuksen tavoitteena oli l\u00f6yt\u00e4\u00e4 soveltuvat perusteet, johon kyberturvallisuuden tutkintokoulutuksen kompetenssit sek\u00e4 kehitett\u00e4v\u00e4t tie-dot ja taidot pohjataan. Vertailukohtia kansalliseen kyberturvallisuuskoulutukseen haettiin my\u00f6s ulkomaalaisten tutkintokoulutusten sis\u00e4ll\u00f6ist\u00e4 vertailemalla niit\u00e4 yhtenev\u00e4ll\u00e4 viitekehyksell\u00e4 Suomessa toteutettavaan koulutukseen. Tutkimuksessa l\u00e4pik\u00e4ytiin my\u00f6s tutkinto-ohjelmista teht\u00e4vi\u00e4 opinn\u00e4ytet\u00f6it\u00e4, sek\u00e4 valmistuneiden sijoittumista ty\u00f6el\u00e4m\u00e4\u00e4n. Ammatillisen tason tutkinnonperusteiden p\u00e4ivitytty\u00e4 sis\u00e4lt\u00e4m\u00e4\u00e4n kyberturvallisuutta, p\u00e4\u00e4tettiin my\u00f6s tutkia sen osaamiskuvauksien tarvetta teollisuudessa.\nJohtop\u00e4\u00e4t\u00f6ksen\u00e4 todettiin, ett\u00e4 k\u00e4ytetty viitekehys osoittautui p\u00e4tev\u00e4ksi tutkinto-ohjelman kehityksess\u00e4, ja analysoinnin ty\u00f6kaluna eri osa-alueisiin kyberturvallisuuden opetuksessa. Tutkimuksen perusteella voitiin vahvistaa mitk\u00e4 osa-alueet kyberturvallisuuden opetuksesta olisivat opiskelijalle hy\u00f6dyllisimpi\u00e4. T\u00e4m\u00e4n tutkimuksen perusteella kyberturvallisuuden tutkinto-ohjelmia suunnittelevat henkil\u00f6t voivat paremmin pohjustaa miten ja kuinka perustaa tutkinto-ohjelmansa kompetenssirakenteen.\nAvainsanat: kyberturvallisuus, kyberturvallisuuskoulutus, pedagogiikka", "language": "fi", "element": "description", "qualifier": "abstract", "schema": "dc"}, {"key": "dc.description.provenance", "value": "Submitted by Ville Korkiakangas (rikorkia@jyu.fi) on 2023-04-03T13:43:30Z\r\nNo. of bitstreams: 0", "language": "en", "element": "description", "qualifier": "provenance", "schema": "dc"}, {"key": "dc.description.provenance", "value": "Made available in DSpace on 2023-04-03T13:43:30Z (GMT). No. of bitstreams: 0\r\n Previous issue date: 2023", "language": "en", "element": "description", "qualifier": "provenance", "schema": "dc"}, {"key": "dc.format.mimetype", "value": "application/pdf", "language": null, "element": "format", "qualifier": "mimetype", "schema": "dc"}, {"key": "dc.language.iso", "value": "eng", "language": null, "element": "language", "qualifier": "iso", "schema": "dc"}, {"key": "dc.publisher", "value": "Jyv\u00e4skyl\u00e4n yliopisto", "language": null, "element": "publisher", "qualifier": null, "schema": "dc"}, {"key": "dc.relation.ispartofseries", "value": "JYU Dissertations", "language": null, "element": "relation", "qualifier": "ispartofseries", "schema": "dc"}, {"key": "dc.relation.haspart", "value": "<b>Artikkeli I:</b> Saharinen, K., Karjalainen, M. and Kokkonen, T. (2019). A Design Model for a Degree Programme in Cyber Security. <i>ICETC 2019: Proceedings of the 2019 11th International Conference on Education Technology and Computers (pp. 3-7).</i> DOI: <a href=\"https://doi.org/10.1145/3369255.3369266\"target=\"_blank\"> 10.1145/3369255.3369266</a>", "language": null, "element": "relation", "qualifier": "haspart", "schema": "dc"}, {"key": "dc.relation.haspart", "value": "<b>Artikkeli II:</b> Saharinen, K., Backlund, J. and Nevala, J. (2020). Assessing Cyber Security Education through NICE Cybersecurity Workforce Framework. <i>ICETC 2020: Proceedings of the 12th International Conference on Education Technology and Computers, 172\u2013176.</i> DOI: <a href=\"https://doi.org/10.1145/3436756.3437041\"target=\"_blank\"> 10.1145/3436756.3437041</a>", "language": null, "element": "relation", "qualifier": "haspart", "schema": "dc"}, {"key": "dc.relation.haspart", "value": "<b>Artikkeli III:</b> Fischer-H\u00fcbner, S. Beckerle, M., Lluch Lafuente, A., Ruiz Mart\u00ednez, A., Saharinen, K., Skarmeta, A. and Sterlini, P. (2020). Quality Criteria for Cyber Security MOOCs. <i>13th IFIP WG 11.8 World Conference, WISE 13, Proceedings.</i> DOI: <a href=\"https://doi.org/10.1007/978-3-030-59291-2_4\"target=\"_blank\"> 10.1007/978-3-030-59291-2_4</a>", "language": null, "element": "relation", "qualifier": "haspart", "schema": "dc"}, {"key": "dc.relation.haspart", "value": "<b>Artikkeli IV:</b> Jaurimaa, J., Saharinen, K. and Kotikoski, S. (2021). Critical infrastructure protection - Employer expectations for cyber security education in\nFinland. <i>20th European Conference on Cyber Warfare and Security, 24th - 25th June 2021, Chester, UK.</i> <a href=\"https://urn.fi/URN:NBN:fi-fe2022022420763\"target=\"_blank\"> Full text</a>", "language": null, "element": "relation", "qualifier": "haspart", "schema": "dc"}, {"key": "dc.relation.haspart", "value": "<b>Artikkeli V:</b> P\u00e4ij\u00e4nen, J., Saharinen, K., Salonen, J., Sipola, T., Vykopal, J. and Kokkonen, T. (2021). Cyber Range - Preparing for Crisis or Something Just for Technical People?. <i>20th European Conference on Cyber Warfare and Security, 24th - 25th June 2021, Chester, UK.</i> DOI: <a href=\"https://doi.org/10.34190/EWS.21.012\"target=\"_blank\"> 10.34190/EWS.21.012</a>", "language": null, "element": "relation", "qualifier": "haspart", "schema": "dc"}, {"key": "dc.relation.haspart", "value": "<b>Artikkeli VI:</b> Karinsalo, A., Saharinen, K., P\u00e4ij\u00e4nen, J. and Salonen, J. (2022). Pedagogical and self-reflecting approach to improving the learning within a cyber exercise. <i>21th European Conference on Cyber Warfare and Security, 16th - 17th June 2022, Chester, UK.</i> DOI: <a href=\"https://doi.org/10.34190/eccws.21.1.221\"target=\"_blank\"> 10.34190/eccws.21.1.221</a>", "language": null, "element": "relation", "qualifier": "haspart", "schema": "dc"}, {"key": "dc.relation.haspart", "value": "<b>Artikkeli VII:</b> Saharinen, K., Viinikanoja, J. and Huotari, J. (2022). Researching Graduated Cyber Security Students \u2013 Reflecting Employment and Job Responsibilities through NICE framework. <i>21th European Conference on Cyber Warfare and Security, 16th - 17th June 2022, Chester, UK.</i> DOI: <a href=\"https://doi.org/10.34190/eccws.21.1.201\"target=\"_blank\"> 10.34190/eccws.21.1.201</a>", "language": null, "element": "relation", "qualifier": "haspart", "schema": "dc"}, {"key": "dc.relation.haspart", "value": "<b>Artikkeli VIII:</b> Ovaska, J., Saharinen, K. and Sipola, T. (2022). Analysing Finnish Cybersecurity Thesis Topics Using Taxonomic Frameworks. <i>2022\nIEEE International Conference on Cyber Science and Technology Congress (CyberSciTech). </i> DOI: <a href=\"https://doi.org/10.1109/DASC/PiCom/CBDCom/\nCy55231.2022.9927808\"target=\"_blank\"> 10.1109/DASC/PiCom/CBDCom/\nCy55231.2022.9927808</a>", "language": null, "element": "relation", "qualifier": "haspart", "schema": "dc"}, {"key": "dc.relation.haspart", "value": "<b>Artikkeli IX:</b> Saharinen, K., Leino, V., Kokkonen, T., Sipola, T. and H\u00e4m\u00e4l\u00e4inen, T. Analysing Cybersecurity Education in Degree Programmes of Finnish Universities. <i>Journal of Informa-\ntion and Computer Security. Submitted and Under Review.</i>", "language": null, "element": "relation", "qualifier": "haspart", "schema": "dc"}, {"key": "dc.relation.haspart", "value": "<b>Artikkeli X:</b> Saharinen, K., Sipola, T. and Kokkonen, T. (2022). Development Needs in\nCybersecurity Education - Final report of the project, Chapter 5. Cybersecurity Education In Universities of Applied Sciences, 59-75. Informaa-\ntioteknologian tiedekunnan julkaisuja, 96/2022. University of Jyv\u00e4skyl\u00e4.</i> <a href=\"http://urn.fi/URN:ISBN:978-951-39-9469-3\"target=\"_blank\"> Full text</a>", "language": null, "element": "relation", "qualifier": "haspart", "schema": "dc"}, {"key": "dc.rights", "value": "In Copyright", "language": null, "element": "rights", "qualifier": null, "schema": "dc"}, {"key": "dc.title", "value": "Research into the Aspects of Cybersecurity Education in Higher Education", "language": null, "element": "title", "qualifier": null, "schema": "dc"}, {"key": "dc.type", "value": "doctoral thesis", "language": null, "element": "type", "qualifier": null, "schema": "dc"}, {"key": "dc.identifier.urn", "value": "URN:ISBN:978-951-39-9511-9", "language": null, "element": "identifier", "qualifier": "urn", "schema": "dc"}, {"key": "dc.contributor.faculty", "value": "Faculty of Information Technology", "language": "en", "element": "contributor", "qualifier": "faculty", "schema": "dc"}, {"key": "dc.contributor.faculty", "value": "Informaatioteknologian tiedekunta", "language": "fi", "element": "contributor", "qualifier": "faculty", "schema": "dc"}, {"key": "dc.contributor.organization", "value": "University of Jyv\u00e4skyl\u00e4", "language": "en", "element": "contributor", "qualifier": "organization", "schema": "dc"}, {"key": "dc.contributor.organization", "value": "Jyv\u00e4skyl\u00e4n yliopisto", "language": "fi", "element": "contributor", "qualifier": "organization", "schema": "dc"}, {"key": "dc.type.coar", "value": "http://purl.org/coar/resource_type/c_db06", "language": null, "element": "type", "qualifier": "coar", "schema": "dc"}, {"key": "dc.relation.issn", "value": "2489-9003", "language": null, "element": "relation", "qualifier": "issn", "schema": "dc"}, {"key": "dc.rights.copyright", "value": "\u00a9 The Author & University of Jyv\u00e4skyl\u00e4", "language": null, "element": "rights", "qualifier": "copyright", "schema": "dc"}, {"key": "dc.rights.accesslevel", "value": "openAccess", "language": null, "element": "rights", "qualifier": "accesslevel", "schema": "dc"}, {"key": "dc.type.publication", "value": "doctoralThesis", "language": null, "element": "type", "qualifier": "publication", "schema": "dc"}, {"key": "dc.format.content", "value": "fulltext", "language": null, "element": "format", "qualifier": "content", "schema": "dc"}, {"key": "dc.rights.url", "value": "https://rightsstatements.org/page/InC/1.0/", "language": null, "element": "rights", "qualifier": "url", "schema": "dc"}]
id jyx.123456789_86248
language eng
last_indexed 2025-02-18T10:55:51Z
main_date 2023-01-01T00:00:00Z
main_date_str 2023
online_boolean 1
online_urls_str_mv {"url":"https:\/\/jyx.jyu.fi\/bitstreams\/236a4f01-3eb2-4480-81b9-82fb9ba5fc0b\/download","text":"978-951-39-9511-9_vaitos18042023.pdf","source":"jyx","mediaType":"application\/pdf"}
publishDate 2023
record_format qdc
source_str_mv jyx
spellingShingle Saharinen, Karo Research into the Aspects of Cybersecurity Education in Higher Education
title Research into the Aspects of Cybersecurity Education in Higher Education
title_full Research into the Aspects of Cybersecurity Education in Higher Education
title_fullStr Research into the Aspects of Cybersecurity Education in Higher Education Research into the Aspects of Cybersecurity Education in Higher Education
title_full_unstemmed Research into the Aspects of Cybersecurity Education in Higher Education Research into the Aspects of Cybersecurity Education in Higher Education
title_short Research into the Aspects of Cybersecurity Education in Higher Education
title_sort research into the aspects of cybersecurity education in higher education
title_txtP Research into the Aspects of Cybersecurity Education in Higher Education
url https://jyx.jyu.fi/handle/123456789/86248 http://www.urn.fi/URN:ISBN:978-951-39-9511-9
work_keys_str_mv AT saharinenkaro researchintotheaspectsofcybersecurityeducationinhighereducation