Dear Fábio Lopes Brezolin ,

I hope the following info is helpful enough:

https://digitalcommons.kennesaw.edu/jcerp/

https://www.researchgate.net/post/Suggestions_for_Research_Topics_in_Education_and_Cybersecurity

There are several publications that focus on cybersecurity education and how to better prepare students and educators for the challenges in this field. Here are a few notable examples:

___

Integrate Cybersecurity Education into the Curriculum: Schools should incorporate cybersecurity topics into their regular curriculum. This can include lessons on safe online behavior, recognizing phishing attempts, and understanding the importance of strong passwords.

Provide Professional Development for Educators: Teachers need ongoing training to stay updated on the latest cybersecurity threats and best practices. Workshops, webinars, and certification programs can help educators gain the necessary skills and knowledge.

Promote a Culture of Cyber Awareness: Encourage a school-wide culture that prioritizes cybersecurity. This can be achieved through regular discussions, awareness campaigns, and involving students in creating cybersecurity policies.

Use Real-World Scenarios and Simulations: Practical exercises, such as simulated cyber-attacks, can help students and educators understand the real-world implications of cybersecurity threats and how to respond effectively.

Exploring research at the intersection of education and cybersecurity is both timely and impactful, especially as cyber threats grow in complexity and frequency. Many educational institutions remain vulnerable due to limited cybersecurity awareness and resources, making this an area ripe for meaningful research. Below are underexplored and emerging research topics in this space, along with methodological insights, key challenges, and potential case studies to consider.

🚀 Emerging & Underexplored Research Topics

1. Cybersecurity Curriculum Development for K-12 and Higher Ed

Focus:

• Designing age-appropriate, engaging cybersecurity curricula.
• Embedding cybersecurity concepts into existing STEM courses.

Research Angles:

• What pedagogical strategies effectively teach complex cybersecurity topics to different age groups?
• How can gamification and hands-on labs improve knowledge retention in cybersecurity education?

Methodologies:

• Mixed methods: Pre- and post-assessments, classroom observations, and focus groups.
• Case studies: Schools successfully integrating cybersecurity into their curricula.

Key Challenge:

• Balancing depth of content with accessibility for younger students.

2. Enhancing Cyber Hygiene Awareness Among Educators

Focus:

• Training educators to model and teach proper cybersecurity behaviors.
• Developing user-friendly professional development (PD) programs.

Research Angles:

• What are the most common cybersecurity misconceptions among educators?
• How does PD impact teachers’ ability to implement cyber-safe practices in classrooms?

Methodologies:

• Surveys assessing baseline knowledge and post-PD improvements.
• Quasi-experimental designs comparing schools with and without PD interventions.

Case Study Idea:

• Implement and analyze a cybersecurity PD program across multiple schools.

3. The Role of Gamification and VR in Cybersecurity Training

Focus:

• Using gamified platforms and Virtual Reality (VR) for immersive cybersecurity education.

Research Angles:

• Does gamified learning improve knowledge retention and engagement in cybersecurity training?
• How can VR simulations enhance incident response training for students?

Methodologies:

• Experimental designs: Compare traditional lectures vs. gamified/VR-based training.
• Eye-tracking studies to understand user engagement in VR environments.

Key Challenge:

• High development costs and accessibility of VR tools.

4. Addressing the Cybersecurity Skills Gap: Bridging Academia and Industry

Focus:

• Aligning cybersecurity education with current and future industry needs.

Research Angles:

• Are graduates equipped with the skills employers need in cybersecurity roles?
• How effective are cybersecurity apprenticeships and bootcamps in bridging skill gaps?

Methodologies:

• Delphi studies with experts to define essential skills.
• Longitudinal studies tracking students from education to employment.

Case Study Idea:

• Partner with a tech company to develop and assess a cybersecurity internship program.

5. Cybersecurity and Digital Equity in Education

Focus:

• Exploring how socioeconomic disparities affect students' access to cybersecurity education and safe online environments.

Research Angles:

• How do underfunded schools manage cybersecurity threats with limited resources?
• What are the risks for students in marginalized communities regarding data privacy and cyberbullying?

Methodologies:

• Ethnographic studies in underserved schools.
• Policy analysis on state and federal funding for educational cybersecurity initiatives.

Key Challenge:

• Ethical considerations when researching vulnerable student populations.

6. Developing Ethical Hacking Programs in Higher Education

Focus:

• Designing ethical hacking labs and programs that emphasize legal and ethical responsibilities.

Research Angles:

• How does participation in ethical hacking competitions (e.g., CTFs) impact students' technical skills and ethical reasoning?
• What are the best practices for creating controlled hacking environments that mitigate legal risks?

Methodologies:

• Pre- and post-assessments of student skills.
• Content analysis of student reflections on ethical challenges encountered during training.

Case Study Idea:

• Analyze outcomes from a university’s Red Team/Blue Team competition.

7. Cybersecurity Awareness and Behavior Among Students

Focus:

• Investigating how students perceive and respond to cybersecurity risks (e.g., phishing, social engineering).

Research Angles:

• What psychological factors influence students' cybersecurity behaviors?
• Can behavioral nudges (e.g., pop-up warnings) reduce risky online behavior in academic settings?

Methodologies:

• Surveys and psychometric assessments to measure cybersecurity awareness and risk tolerance.
• A/B testing to evaluate the effectiveness of different awareness interventions.

Key Challenge:

• Students often know safe practices but don’t follow them (the "intention-behavior gap").

🧪 Potential Methodological Approaches

🔥 Key Challenges in This Research Space

• Rapid Technological Change: Educational curricula often lag behind industry trends in cybersecurity.
• Resource Constraints: Many schools lack funding and expertise to implement robust cybersecurity programs.
• Privacy Concerns: Research involving minors or sensitive data requires strict adherence to ethical guidelines (e.g., FERPA, GDPR).
• Behavioral Gaps: Awareness doesn’t always translate into safe online practices—exploring why remains an under-researched area.

📚 Potential Case Studies & Real-World Examples

🎯 Final Thoughts

At the intersection of education and cybersecurity, there’s a wealth of underexplored opportunities—especially in improving awareness, bridging skills gaps, and preparing the next generation for an increasingly digital (and vulnerable) world. By focusing on practical applications, behavioral insights, and equity in access, your research can have a profound impact.

It seems to me that at least in Poland, because here I have some contact with education in the field of cybersecurity, this education focuses too much on stories, anecdotes and examples, and there is too little explanation and understanding of how it all works. I understand that awareness training for children, seniors and office workers is different than educating cybersecurity specialists. Unfortunately, in practice I don't really see the difference. Students graduate in fields such as "cybersecurity" or "forensic computer science" and cannot read documentation, do not understand the operation of devices, software, communication protocols, file systems... the basic things they will have to work with. I believe that mistakes are also made earlier, in terms of the level of teaching mathematics and physics. I also see a disproportion between compliance, where various regulations are often the basis of teaching curricula, and technical issues, which are often completely omitted in curricula. These are just my observations, but I hope they will be useful to you in order to direct systematic work on these issues.

Paweł Kaczmarzyk I completely understand your feelings and observations. It's quite common for students to come up with complex hypotheses about cloud technology, yet struggle with basic infrastructure concepts. Many find it challenging to explain what they are doing, even when it's related to their field of expertise. I remember a colleague from the red team once said, "My work is so secret that even I don't know what I do." This highlights the disconnect that can sometimes occur in technical fields.