SecAware4school

More security in schools! Information Security Awareness for Daily Life at School

About the project

In the project “SecAware4school,” students and their attachment figures (teachers and parents) are informed about the subject of information security and given a heightened awareness of its importance. It is essential that they acquire the habit of carefully handling personal data when using Internet services and social networks.

In order to communicate the abstract topic of information security and make it concrete and easily understandable for students, a variety of creative teaching and learning methods are used. This allows the basic knowledge of information security at the technical and organizational level to intersect with experience-oriented learning scenarios and coaching and mentoring concepts. The creative methods that are used include analog and digital simulations. Students, teachers, and parents from five pilot program schools are taking part in the project. SecAware4school is sponsored by the Horst Görtz Foundation

OBJECTIVES AND CONTENT

SecAware4school is a research project that provides students, teachers, and parents with the latest knowledge about issues of information security in everyday school life and raises their awareness of the topic. Based on the playful and experience-oriented learning scenarios, an up-to-date awareness of information security is instilled via a process of research and training.

In each pilot school, two classes from grades 6, 9, and 11 took part with twenty students each. These are trained in line with their individual level and can then pass on the digital skills they have learned to younger grades.

To achieve this, ten experience-oriented learning scenarios per grade with three different levels of difficulty have been developed, played, and/or modified. All those involved are given workshop training to expand their skills. The teachers are prepared in such a way that they can train, guide, and raise the awareness of new young safety advisors at the end of the project. The main focuses are:

  • Information Security: Why?
  • Safe Operation of Smartphones
  • Legal Framework for Information Security
  • Safety-Relevant Behavior
  • Encryption and Digital Signatures
600

participants from 5 schools

36

learning scenarios

12

subject areas

3

levels of difficulty

METHODICAL APPROACH

In order to achieve the aims of the project, we have developed specific trainings and awareness-raising concepts suited to the target audience (students, parents, and teachers). In addition, we design, test, and evaluate learning materials (e.g., experience-oriented learning scenarios).

Game-based (GBL) and accelerated (AccL) learning approaches are transferred to experience-oriented learning scenarios in the field of information security. Previous studies conducted by Prof. Scholl and her research partner known_sense have shown that it is particularly important to foster motivation and create an emotional connection in information security learning processes.

The project SecAware4school making it possible to better assess the information security risks through selected methods that affect ordinary users (students, parents, and teachers).

These methods

  • promote communication skills, social interaction, and teamwork
  • explore real (problem) situations from everyday work life
  • make complex and abstract learning content concrete and tangible
  • provide direct feedback on students’ learning progress
  • enable learning through a process of trial and error and repetition
  • are geared to the learners, their levels of knowledge, and their needs (learner-centered learning)
  • support the transfer and exchange of knowledge

LEARNING SCENARIOS

Taking into account the research findings from GBL and AccL, the project SecAware4school is dedicates to analog and digital learning scenarios. In combination, these can lead to a better assessment of the possibilities and dangers associated with information security. In light of this, the following learning scenarios have been developed:

Information Security

This learning scenario is about practicing the use of technical terms in the area of information security. With the increasing amount of information and services available online, it is important to familiarize yourself with the relevant technical terms.

Digital Social

This learning scenario focuses on individual behavior on social platforms online and on how you use your smartphone in your environment. The learning scenario is intended to stimulate discussion about your behavior toward other people and to raise critical awareness of the “new” media and its uses.

Security Surfer

In this learning scenario “Security Surfer: Recognizing Dangers and Protective Measures”, the Internet is looked at in global terms and the insides are examined in more detail. Surf through the ocean of the Internet, recognize the dangers, and find the right protective measures


Social Networks

At this learning station, the aim is to find solutions and contact persons in different situations and to be aware of proper and considerate interaction in social networks.

Storytelling

This learning scenario helps to deepen or introduce to a topic. In SecAware4school, the focus is on all aspects of information security.

Start scenario

Fake or Real

In this scenario you get to know various cases, terms, tools, and strategies that can be used to “falsify” current news and learn to optimize your own behavior.


Security Duell

The learning scenario “Security Duel: Information Security in the Company” offers the possibility of recognizing potential points of attack in a company and identifying suitable protective measures.

Data Espionage: Secure Space

This learning scenario is ideal for raising awareness of possible safety-relevant objects in the workplace that require special storage.

Start scenario

Image Rights (Digital)

This learning scenario helps clarify the issue of image rights.

Start scenario


Hacker Terminal

This learning scenario is good for delving into and repeating basic concepts of information security. In the role of the retro hacker, the goal is to use clues to guess “encrypted” passwords in order to locate possible access points and find a way into the system. Technical terms are learned, and the chain of association reinforced.

Start scenario

Sketch-Secure Passwords

Wie gehen wir mit Passwörtern um? In diesem Sketch-Lernszenario zu Passwörtern werden einige alltägliche Beispiele zum Umgang mit Passwörtern gezeigt. Hier ist das Ziel die richtige Vorgehensweise zum Umgang mit Passwörtern zu finden, um für maximale Sicherheit der Passwörter zu sorgen.

Start scenario

Publications

A variety of content has been generated as part of the project: the relevant works are presented below.

Neues Projekt für Informationssicherheitsbewusstsein

Schüler lernen sensiblen Umgang mit ihren Daten in dem neuen Projekt „SecAware4School“ an der Technischen Hochschule Wildau. Drei Königs Wusterhausener Schulen gehören zu den Projektpartnern.

Play the Game and Be Aware
of Information Security

IHCI Video-Presentation by Regina Schuktomow,
Zagreb, Croatia 2020

Forschungsbericht 2019

Schüler in Sachen Datenschutz sensibilisieren Eine kreative und nachhaltige Lösung zur Sensibilisierung für Informationssicherheit und den eigenen Datenschutz.

Schüler in Sachen Datenschutz sensibilisieren

Eine kreative und nachhaltige Lösung zur Sensibilisierung für Informationssicherheit und den eigenen Datenschutz.

Erster Kreativworkshop im Projekt SecAware4school

Über die Vorgehensweise Sensibilisierung und Eindrücke.

WMSCI 2019 Florida

Participatory Research with Schools to Develop Serious Games for Information Security Awareness

LICE 2019 London International conference on Education

Participatory Research with Schools to Develop Serious Games for Information Security Awareness

WMSCI 2020 Florida

Information Security at Schools: A Practical Game-Based Application with Sustained Impact WMSCI
Video-Presentation by Regina Schuktomow

IICE 2020 Ireland

Information Security Awareness from Toddler to Grandma: A Target-Group-Oriented, Gender-Specific, and Intergenerational Challenge of Interdisciplinary Interest.
Video-presentation by Regina Schuktomow

Team

Prof. Dr. Margit Scholl

Project Management

Regina Schuktomow

Project Lead

Stefanie Gube

Development

Peter Koppatz

Programming and development

Josephine Gerlach

Development

Denis Edich

Programming and development

Clara Paetow

Assistant

Yanan Tian

Assistant

Christin Walch

Assistant

Peter Ehrlich

Labor-Ing.

Contact

Technical University of Applied Sciences
Hochschulring 1
15745 Wildau

Prof. Dr. Margit Scholl
Project Management
Department: Economics, Computer Science and Law

+49 3375 508 917
margit.scholl@th-wildau.de
http://www.th-wildau.de/scholl
Building 100, Room 106

 
 
 

Regina Schuktomow
Project Lead

+49 3375 508 239
regina.schuktomow@th-wildau.de
Building 100, Room 304

Disclaimer:
Although we have carefully checked the content, we assume no responsibility for the content of websites to which links are provided. Should content be discovered in which the rights of third parties are violated, we request immediate notification for the purpose of blocking.

Privacy policy (PDF) in German