A model of an innovative approach to education in the field of cyber operations

Področje kibernetskih operacij in s tem razvoj ter upravljanje tako obrambnih kot ofenzivnih aktivnosti v kibernetskem prostoru zahtevajo nabor dobro izšolanega kadra. Poleg temeljnih znanj, ki omogočajo razumevanje dogajanja, so potrebne številne poglobljene praktične izkušnje. Na področju kibernetskih operacij je pomembno, da se vanj vključujejo strokovnjaki iz različnih strok, ki se usmerijo v različne specializacije znotraj kibernetskih operacij. V tej doktorski nalogi predstavljen model inovativnega pristopa k izobraževanju na področju kibernetskih operacij omogoča hitrejši razvoj zmogljivosti z obravnavanega področja. Predvsem omogoča, da slušatelji pridobijo bolj poglobljena in oprijemljiva znanja s področja kibernetske varnosti, ki se kot samostojna izobraževalna smer z različnimi predmetniki intenzivno pojavlja v ponudbi študijskih programov visokošolskih ustanov po svetu. Model inovativnega pristopa k izobraževanju na področju kibernetskih operacij bo omogočal delo, primerno skupini slušateljev z različnimi predznanji in iz različnih strok, ter bo dovolj enostaven za uporabo, hkrati pa bo pokril temeljne potrebe razumevanja kibernetskih operacij. Predstavljen model je namenjen za integracijo tako v procesih formalnega visokošolskega izobraževanja kot tudi v okviru vseživljenjskega izobraževanja ter še posebej v okviru internih usposabljanj v državnih varnostnih organizacijah. Model inovativnega pristopa k izobraževanju na področju kibernetskih operacij sestavljajo trije gradniki: modeliranje kibernetskih operacij, informacijska podpora kibernetskim operacijam in delovni proces. Gradnik modeliranja kibernetskih operacij temelji na konceptu modeliranja napadov. Ključni namen gradnika informacijske podpore kibernetskim operacijam je opremiti slušatelje z znanji za obvladovanje in produciranje strateških, operativnih, taktičnih in tehničnih obveščevalnih informacij o grožnjah ter pristopih za njihovo deljenje z drugimi deležniki. Delovni proces kot tretji gradnik v modelu se nanaša na usmerjanje skupine slušateljev pri delu s predstavitvijo kibernetske operacije, vključno z zbiranjem in vrednotenjem podatkov ter z ustreznim dokumentiranjem dela. Ker je model inovativnega pristopa k izobraževanju na področju kibernetskih operacij namenjen za uporabo v različnih procesih izobraževanja in okoljih, kot so mednarodne vaje kibernetske varnosti, je evalvacija predlaganega modela potekala z izvedbo delovnega srečanja s študenti, izvedbo študijske delavnice z varnostnimi strokovnjaki ter s strukturiranimi intervjuji.The field of cyber operations and, alongside it, the development and management of defence and offence activities in cyberspace require a set of highly trained personnel. In addition to the knowledge base, which enables a proper understanding of the developments, in-depth practical experience is fundamental. It is important that the field of cyber operations includes experts from various disciplines who have adopted different specializations within it. In this doctoral thesis, the model of an innovative approach to education in the field of cyber operations is presented. It is a model which enables faster development of capabilities in the field considered. Above all, it enables students to gain a more in-depth and tangible knowledge of cyber security, which is an independent educational program with diversified curricula, commonly appearing among study programs offered by higher education institutions all around the world. The model of an innovative approach to education in the field of cyber operations will provide work suitable for a body of students from diverse backgrounds and disciplines, and will be easy enough to apply, while also covering the basic needs for understanding cyber operations. The model presented is aimed to be integrated in the processes of formal higher education and in the framework of lifelong learning, as well as in the framework of internal training conducted by national security organizations. The model of an innovative approach to education in the field of cyber operations consists of three building blocks: cyber operations modelling, cyber operations information support and work process. Cyber operations modelling building block is based on the concept of attack modelling. The key purpose of the cyber operations information support building block is to equip students with the skills to manage and produce strategic, operational, tactical and technical intelligence information on threats and acquaint them with approaches to sharing the information with other stakeholders. As the third building block of the model, the work process refers to the process of directing a body of students working on presenting cyber operation, including collecting and evaluating data, and properly documenting the work. The model of an innovative approach to education in the field of cyber operations is intended to be used in various education processes and environments, such as international exercises on cyber security, which is why the evaluation of the proposed model has been carried out by conducting a working meeting with students, by conducting a study workshop with security experts and by means of structured interviews