Where security education is lacking

  • Authors:
  • Venkat Pothamsetty

  • Affiliations:
  • Critical Infrastructure Assurance, Cisco Systems, Austin, Texas

  • Venue:
  • InfoSecCD '05 Proceedings of the 2nd annual conference on Information security curriculum development
  • Year:
  • 2005

Quantified Score

Hi-index 0.00

Visualization

Abstract

Security vulnerabilities have grown at a tremendous pace during the last decade. Security education and related courses in universities have caught up in the last few years. This paper aims to determine disparities, if any, between the security offerings of the academia and the needs of the computing industry. This paper also analyzes whether the academia and industry are in-fact headed in the right direction of mitigating the ever increasing security vulnerabilities.First, we look at the content and structure of the present security courses. Second, we analyze the needs of the industry, looking at the responsibilities and skill set required for various security related jobs.Third, we dig deep into the root causes of common security vulnerabilities, and analyze whether the content and structure of the security courses can help mitigate the security vulnerabilities.Finally, we present our conclusions about how security education has fared and derive recommendations on ways to improve security education curricula.