Abstract:Aim/Purpose. Capture the Flag (CTF) challenges are a popular form of cybersecurity education where students solve hands-on tasks in a game-like setting. These exercises provide learning experiences with various specific technologies and subjects, as well as a broader understanding of cybersecurity topics. Competitions reinforce and teach problem-solving skills that are applicable in various technical and non-technical environments outside of the competitions. Background. The Information Search Process (ISP) is a framework developed to under-stand the process by which an individual goes about studying a topic, identifying emotional ties connected to each step an individual takes. As the individual goes through the problem-solving process, there is a clear flow from uncertainty to clarity; the individual’s feelings, thoughts, and actions are all interconnected. This study aims to investigate the learning of cybersecurity concepts within the framework of the ISP, specifically in the context of CTF competitions. Methodology. A comprehensive research methodology designed to incorporate quantitative and qualitative analyses to draw the parallels between the participants’ emotional experiences and the affective dimensions of learning will be implemented to measure the three primary goals. Contribution. This study contributes significantly to the broader landscape of cybersecurity education and cognitive-emotional experiences in problem-solving. Findings. The study has three primary goals. First, we seek to enhance our under-standing of the emotional and intellectual aspects involved in problem-solving, as demonstrated by the ISP approach. Second, we aim to gain in-sights into how the presentation of CTF challenges influences the learning experience of participants. Lastly, we strive to contribute to the improvement of cybersecurity education by identifying actionable steps for more effective teaching of technical skills and approaches. Recommendations for Practitioners. Competitions reinforce and teach problem-solving skills applicable in various technical and non-technical environments outside of the competitions. Recommendations for Researchers. The Information Search Process (ISP) framework may enhance our understanding of the emotional and intellectual aspects involved in problem-solving as we study the emotional ties connected to each step an individual takes as the individual goes through the problem-solving process. Impact on Society. Our pursuit of advancing our understanding of cybersecurity education will better equip future generations with the skills and knowledge needed to ad-dress the evolving challenges of the digital landscape. This will better pre-pare them for real-world challenges. Future Research. Future studies would include the development of a cybersecurity curriculum on vulnerability exploitation and defense. It would include practice exploiting practical web and binary vulnerabilities, reverse engineering, system hardening, security operations, and understanding how they can be chained together.

The SFS summer research study at UMBC: Project-based learning inspires cybersecurity students

Student-Centered Learning in Cybersecurity in Summer Semester

Security Engineering Project

Cybersecurity as a Crosscutting Concept Across an Undergrad Computer Science Curriculum: An Experience Report

Cybersecurity program for Philippine higher education institutions: A multiple-case study

Integration and Evaluation of Spiral Theory based Cybersecurity Modules into core Computer Science and Engineering Courses

Gamified Cybersecurity Education Through the Lens of the Information Search Process: An Exploratory Study of Capture-the-Flag Competitions [Research-in-Progress]

Embedding Secure Coding Instruction into the IDE: A Field Study in an Advanced CS Course.

Evaluation of an Internet of Things Device-Based Educational Approach to Engage a More Diverse Cybersecurity Workforce

XSS for the Masses: Integrating Security in a Web Programming Course using a Security Scanner

Developing Incident Response-Focused Cybersecurity Undergraduate Curricul

A CTF-Based Approach in Cyber Security Education for Secondary School Students

Designing a Security System Administration Course for Cybersecurity with a Companion Project

Gathering Insights from Teenagers' Hacking Experience with Authentic Cybersecurity Tools

Design and Implementation of Tabletop Cybersecurity Simulation for Health Informatics Graduate Students

A Feasibility Study Describing the Successes and Challenges of Implementing a Virtual Community Health Worker Training Among High School Students Participating in a Summer STEM Enrichment Program

Capture the Flag for Team Construction in Cybersecurity

Effective Learning of Cybersecurity Concepts with Model-Eliciting Activities

Using Real-world Bug Bounty Programs in Secure Coding Course: Experience Report

Cybersecurity Knowledge and Skills Taught in Capture the Flag Challenges

Adapting CTF challenges into virtual cybersecurity learning environments