Technology and Innovation Commons^™

Arizona’S Experiential Learning Opportunities: Regional Security Operations Centers And Cybersecurity Clinics, Joshua Kipers, Paul Wagner, Robert J. Honomichl

Journal of Cybersecurity Education, Research and Practice

The increasing frequency, sophistication, and economic impact of cybersecurity incidents have intensified the global demand for a skilled cybersecurity workforce. Traditional academic programs often fail to provide the applied experience necessary to prepare graduates for the rapidly evolving threat landscape. This paper examines Arizona’s innovative approaches to experiential cybersecurity education through the establishment of Regional Security Operations Centers (RSOCs) and the Arizona Cybersecurity Clinic. These initiatives integrate Kolb’s Experiential Learning Theory and the NICE Cybersecurity Workforce Framework to align academic preparation with real-world practice. The RSOCs, supported by the Arizona Department of Homeland Security, provide paid student internships focused on …

Static Malware Analysis For Incident Response: Developing A Tactical Aid With Ember, Joel Meoak, Shengjie Xu

Journal of Cybersecurity Education, Research and Practice

Incident responders face a variety of challenges when identifying malware using existing solutions, particularly when rapid tactical decisions are needed. Traditional malware detection methods are often signature-based, limiting their effectiveness to previously known threats detected by anti-virus (AV) engines. Online analysis tools introduce confidentiality risks, potentially alerting adversaries that their actions are under scrutiny. While free sandbox environments offer useful capabilities, they often require substantial setup time and hardware resources that may not be available in the field. This research leverages the Elastic Malware Benchmark for Empowering Researchers (EMBER) dataset to develop a lightweight, portable tactical decision aid that enables …

Payments Systems Portfolio: The Genius Act And Stablecoins As A Geoeconomic Tool, Ashu Ebot-Tabi

Graduate Scholarly Works

In-depth research paper discussing stablecoins: specifically how they work, their rise in popularity, and how recent legislation could be used to make them a tool to further America's global economic power.

Experiential Learning: Innovative Approaches To Post-Secondary Cybersecurity Education, Brendan Bertone, Paul Wagner, Joshua Pauli

Journal of Cybersecurity Education, Research and Practice

The cybersecurity profession continues to face a significant shortfall of qualified professionals despite steady growth in degree programs. Employers consistently cite experience as the main barrier for entry-level cybersecurity hires. This paper argues that clinic-based experiential learning offers a scalable solution to that preparation gap. A systematic literature review spanning academic and professional literature was conducted to examine: (1) barriers to entry for aspiring cybersecurity professionals; (2) the effectiveness of experiential learning compared to traditional instruction; and (3) the viability and scalability of cybersecurity clinics. Screening emphasized workforce development, experiential pedagogy, and alignment with the NICE Cybersecurity Workforce Framework. Findings …

Information Security Awareness And Behavior Of Smartphone Users In The Ibadan Metropolis, Nigeria, Funmilola Olubunmi Omotayo

Journal of Cybersecurity Education, Research and Practice

Today, there is a rapid increase in the number of people using the Internet via smartphones and relying on them for most of their daily activities. Consequently, smartphones are becoming the target of criminals for atrocious purposes. This study investigated the information security awareness and behavior of smartphone users in the Ibadan metropolis, Nigeria. The study adopted a descriptive survey design. Data was collected with a questionnaire from 400 respondents who were conveniently selected. Findings revealed that most smartphone users knew about the smartphone security features available on their phones. However, most also engaged in behaviors that threatened their information …

Indigenous Finance And Women Empowerment: The Digital Transformation Of Stokvel Systems In South Africa, Papama Mtambeka, Ulrike Rivett, Rebecca Njuguna

African Conference on Information Systems and Technology

This paper explores how the digital transformation of stokvels in South Africa is reshaping women’s empowerment. Stokvels, a form of indigenous savings or rotating savings clubs, have long served as a financial safety net for women, particularly for underserved rural and peri-urban communities. However, with the increasing integration of mobile technologies, fintech platforms, and digital communication tools, these systems are undergoing a significant shift. Drawing on qualitative data from South African women engaged in digitally transformed stokvels, the study examines how digital tools redefine women’s economic and social empowerment. Through the lens of Nego-feminism and Snail-sense feminism, the research highlights …

Efficacy Of Fintech Solutions In Advancing Financial Inclusion For The Underserved In South Africa: A Systematic Literature Review, Tebogo S. Legodi, Adheesh Budree

African Conference on Information Systems and Technology

Financial inclusion in South Africa is a critical mechanism for addressing systemic poverty, unemployment, and inequality. Fintech solutions have increasingly been positioned as key enablers of expanded access to financial services, particularly among underserved populations. However, there remains a lack of literature that evaluates the efficacy, rather than merely the impact, of these technologies. This study presents a systematic literature review (SLR) of 21 peer-reviewed articles, policy documents, and industry reports to examine how Fintech advances financial inclusion in South Africa. The literature is synthesised into four thematic categories: Financial Inclusion (Concepts and Metrics); Fintech in South Africa and Global …

Applying Detective Analytics For Mitigating Financial Crime In An Organisation, Nontobeko Mlambo, Tiko Iyamu

African Conference on Information Systems and Technology

Despite the growing popularity of detective analytics, it is consistently challenging to understand the factors that influence the adoption. This is increasingly discouraging organisations, even though the tool is important for tracing, tracking, and mitigating financial crime. This study applied concepts of ‘follow the actors’ and shifting negotiation of actor-network theory (ANT) to gain a better understanding of the factors that influence the adoption of detective analytics in a qualitative case study using a South African-based financial organisation. From the analysis, integration of analytics tools, integration of detective analytics with other systems and processes, development of a template for each …

A Comprehensive Review On Gamification In Neurocybersecurity, Ms. Kritika

Journal of Cybersecurity Education, Research and Practice

The research investigates gamification methods as it applies to the emerging interdisciplinary domain that brings together cybersecurity with neuroscience and psychology. Neurocybersecurity implements neural concepts to protect digital systems from security threats while targeting the human vulnerabilities that present as the strongest points of attack. Several researchers have examined gamification techniques which incorporate game design elements to enhance cybersecurity training outcomes by improving user participation and knowledge retention and user conduct compliance. The research incorporates Self-Determination Theory along with Cognitive Load Theory to explain the design principles for efficient gamified interventions. The implementation of both cognitive performance improvement and neuroplasticity …

Unpacking Digital Transformation – Constructing A Framework Based On Industry Use Cases, Khawaja Asjad Saeed, Andrew William Green, Alison Brooke Hedrick

Faculty Articles

Based on industry use cases, we identify six distinct types of digital transformation (DT), each grounded in a specific concept or enabling technology. These DT types can be implemented individually or combined to drive transformation initiatives. While deploying a single DT type often focuses on improving operational efficiency or streamlining existing workflows, initiatives that combine multiple DT types tend to pursue more ambitious goals, such as the creation of new products, services, or business models. However, the complexity increases significantly with the integration of multiple DT types, as organizations must not only address behavioral changes but also overcome technical challenges …

Optimizing Information Security In Cloud Environments: A Risk Management Approach And Guide For Enterprise Cloud Security, Joshua Olusegun Oyeniyi, Oluwashina Akinloye Oyeniran

Journal of Cybersecurity Education, Research and Practice

In recent years, cloud computing has become increasingly integral to organizational operations due to its scalability, accessibility and cost effectiveness in managing data and resources. However, the rise in security threats and attacks on cloud environments necessitates having robust measures in place to protect data confidentiality, integrity and availability. This paper presents an optimized approach to cloud information security management by reviewing the current threat landscape, evaluating key risk management frameworks, and provided practical solutions for enhancing enterprise cloud security. The study examined three leading cloud security frameworks: the Cloud Controls Matrix (CCM) known for its cloud-specific controls, the NIST …

The National Cybersecurity Teaching Coalition: Expanding Cybersecurity Education Opportunities, Paul Wagner, Melissa Dark, Robert Honomichl, Filipo Sharevski, Sandra Leiterman

Journal of Cybersecurity Education, Research and Practice

The increasing prevalence of cybersecurity threats and the shortage of qualified professionals necessitate innovative solutions for cybersecurity education at all levels. Despite the expansion of post-secondary cybersecurity programs, employer dissatisfaction with graduates and a lack of standardized introductory curricula highlights the need for structured secondary education pathways. The National Cybersecurity Teaching Coalition (NCTC) and its National Cybersecurity Teaching Academy (NCTA) address this gap by equipping high school educators with the necessary knowledge and credentials to teach cybersecurity effectively. NCTA offers an 18-credit cybersecurity graduate certificate program to ensure teachers are competent and confident to develop and teach cybersecurity curriculum with …

The Impact Of Ai Use In Programming Courses On Critical Thinking Skills, Christian Jay St Francis Clarke, Abdullah Konak

Journal of Cybersecurity Education, Research and Practice

Proficiency in computer programming extends far beyond memorizing syntax; it depends on the cultivation of critical thinking. Computer programming requires multiple interconnected competencies, including systematic problem analysis, algorithmic reasoning, mastery of programming languages, debugging capabilities, a comprehensive understanding of software development methodologies, rigorous testing practices, and systematic troubleshooting approaches. These skills are also essential for cybersecurity experts; cybersecurity programs require several programming courses to enhance students’ technical and critical thinking skills. Generative AI (GenAI) technologies have fundamentally changed the process of developing applications and approaches to teaching coding. The growing use of GenAI technologies by students in writing computer code …

The Urgency Of Instituting Systemic Cybersecurity Curriculum Within Stem At Secondary Educational Levels In Preparation For Postsecondary Institutions., Robert Spencer

Journal of Cybersecurity Education, Research and Practice

Over the last 20 years, many secondary institutions have made advances developing curriculum defined as “STEM (Science, Engineering and Mathematics)” in order to ensure secondary students are eligible to apply as well excel in technology degree programs at the college and university levels. Although various initiatives exist, there are studies however, which allude to a great possibility that there will be a lack of cybersecurity professionals filling present day and anticipated future positions. Despite a large number of federal and educational enhancements there is need for additional research regarding instituting overall systemic processes and curriculum which supports secondary student transition …

Educating Students On The Behavioral And Psychological Aspects Of Romance Scam Victimization Via A Social Engineering Competition, Rachel Bleiman, Hwanhee Park, Aunshul Rege

Journal of Cybersecurity Education, Research and Practice

The online dating industry generated 2.98 billion USD in 2023 and is estimated to reach 3.6 billion USD by 2025. Not surprisingly, online dating platforms are rife with romance scams that cause financial damages, with estimated losses of 1.3 billion USD in 2022 alone. Additionally, victims suffer emotional and psychological harms. This paper shares findings from a 2023 Romance Scam and Social Engineering Competition (RSSEC) that introduced students to the behavioral and psychological aspects of romance scams. Specifically, the competition aimed to expose students to (i) understanding how victims experience social engineering (SE) - the psychological manipulation of human behavior, …

Managing Cybersecurity In Local Governments: 2022, Donald F. Norris Phd, Laura K. Mateczun Jd

Journal of Cybersecurity Education, Research and Practice

This paper, based on data from our second nationwide survey of cybersecurity among local or grassroots governments in the U.S., examines how these governments manage this important function. As we have shown elsewhere, cybersecurity among local governments is increasingly important because these governments are under constant or nearly constant cyberattack. Due to the frequency of cyberattacks, as well as the probability that at least some attacks will succeed and cause damage to local government information systems, these governments have great responsibility to protect their information assets. This, in turn, requires these governments to manage cybersecurity effectively, something our data show …

What Does Chatgpt Know About Information Systems?, Daniel O'Leary, Veda C. Storey, Aaron M. French, Joseph R. Buckman, Cecil Chua, Andrew William Green, Grace Gu, Fred Niederman, Francis Pereira, Gary Templeton, Linda Wallace

Faculty Articles

Large language models such as ChatGPT provide efficient access to a wealth of information. However, there are significant questions regarding the depth and quality of knowledge in any one domain. This paper focuses specifically on the information systems (IS) field and assesses ChatGPT’s knowledge. To analyze the extent and quality of information systems knowledge derived from queries to ChatGPT, we used over 3,000 queries from a broad range of exam and quiz questions. These queries were obtained from university courses and professional information system certification exams. The query topics are based on a framework for information systems education, with queries …

Exploring School Teachers' Cyber Security Awareness, Experiences, And Practices In The Digital Age, R Ravichandran, Sonam Singh, P Sasikala

Journal of Cybersecurity Education, Research and Practice

This study investigates the awareness and practices of cyber security among school teachers, exploring their understanding of cyber threats, online behaviours, and response mechanisms to cyber incidents. A structured questionnaire was administered to gather data on demographic information, cyber security training, online practices, and experiences with cybercrime. The findings reveal varying levels of awareness among teachers, with many reporting limited knowledge of prevalent cyber threats such as phishing and identity theft. Despite the increasing reliance on digital tools for teaching, a significant number of respondents indicated a lack of formal training in cyber security. The study highlights the necessity for …

Insights In Cybersecurity Of A Smart Campus - A Review, Mircea Ţălu

Journal of Cybersecurity Education, Research and Practice

The profound impact of the Internet of Things (IoT) on various fronts, is driven by technological advancements, the ubiquitous spread of information, and the emergence of transformative events. IoT presents a diverse array of possibilities within university environments, fostering a more connected and enhanced educational experience. This research undertakes a comprehensive review of existing literature to provide context to the IoT and underscore its crucial significance in the realm of smart campuses. Additionally, the paper explores the intricate connections between IoT and key concepts such as cybersecurity and wireless sensor networks to present a holistic perspective. It delves into the …

Omnichannel Retailing: An Exploratory Study Of Limiting The Customer Journey In A Digital-First Context, Terence L. Holmes, Edward C. Brewer, Elizabeth Patterson

Atlantic Marketing Journal

A recent retail trend is the rise of “digital-first” firms, where their merchandise is sold primarily via online efforts. In this exploratory study we describe our investigation of the customer journey for a digital-first seller of cosmetics and personal care products. We collected qualitative and quantitative data from a customer survey and follow-up interviews. Results indicate that personal connections and actual product use are the two most important touchpoints customers consider in first discovering the seller and then building a relationship with the brand. We describe practical applications of the findings and suggest ideas for future research.

Teaching Social Marketing Concepts Through Prosocial Behavior Lenses, Bela Florenthal

Atlantic Marketing Journal

This study investigates the educational value of a prosocial project embedded in a college-level marketing course. Framed through a humanistic and holistic lens, the initiative integrated acts of kindness (AOKs) to engage students in real-world application of social marketing concepts. Using a mixed-methods approach, data were collected through student reflections and surveys, revealing high levels of cognitive, emotional, and behavioral engagement. Students developed empathy, compassion, and self-awareness, reinforcing the importance of integrating experiential learning into business education. The project also addressed AACSB’s emphasis on societal impact and aligned with the UN’s Sustainable Development Goals by promoting emotional well-being and civic …

Digital Twin And Cybersecurity In Additive Manufacturing, Lidong Wang

Journal of Cybersecurity Education, Research and Practice

Additive manufacturing (AM) has been applied to automotive, aerospace, medical sectors, etc., but there are still challenges such as parts’ porosity, cracks, surface roughness, intrinsic anisotropy, and residual stress because of the high level of thermal gradient. It is significant to conduct the modeling and simulation of the AM process and achieve quality products. Digital Twin (DT) can help AM with forecasting defects/errors through simulation and real-time process monitoring. DT is a concept of Industry 4.0, and its digital structure reflects the real-time behaviors of a cyber-physical or physical system. This paper introduces the progress of DT applications in AM, …

Beyond Human-Centric Models In Cybersecurity Education: A Pilot Posthuman Analysis Of The Nice Workforce Framework For Cybersecurity, Ryan Straight

Journal of Cybersecurity Education, Research and Practice

This study applies a posthuman lens to the National Initiative for Cybersecurity Education (NICE) Workforce Framework, examining two key Work Roles in cybersecurity education. Employing a novel posthuman coding scheme, the associated Tasks, Knowledge, and Skills (TKS) statements were analyzed. Findings reveal significant posthuman elements within the framework while identifying opportunities for further integration. The analysis demonstrates a strong presence of human-technology entanglement and adaptive learning concepts, yet highlights areas where the framework could emphasize system complexity and interconnectedness. This research contributes to ongoing discussions on cybersecurity education in complex technological landscapes, proposing a theoretical framework for integrating posthuman concepts …

Wormhole Attack Mitigation In Wireless Network Using Propagation Delay, Harry May, Travis Atkison

Journal of Cybersecurity Education, Research and Practice

This paper presents a novel approach for mitigating wormhole attacks on wireless networks using propagation delay timing. The wormhole attack is a persistent security threat that threatens the integrity of network communications, potentially leading to data theft or other malicious activities. While various methods exist for combating wormhole attacks, our approach offers advantages that set it apart. Our approach involves a combination of proactive and reactive measures, harnessing box plot analysis and weighting factor techniques to identify and isolate outlier node links effectively. Unlike traditional methods, our solution not only detects outlier links but also defines dynamic weighting factors, providing …

Happy Hours, Not Office Hours: Socially Engaging Cybersecurity Students In A Large Online Graduate Course, James T. Mccafferty

Journal of Cybersecurity Education, Research and Practice

Engagement is a critical part of student learning and student success. This is especially true in online classes where students have less interaction with their classmates and instructors when compared to traditional face-to-face courses. Research on engagement has shown that when students are meaningfully engaged it can increase student satisfaction and it may also increase levels of academic achievement, including grades earned and degree progression (e.g. Wong et al., 2024). This paper focuses on social engagement in a graduate cybersecurity program that uses large, expandable online courses as described by Whitman and Mattord (2023). Large online graduate classes (i.e., more …

Leveraging Propagation Delay For Wormhole Detection In Wireless Networks, Harry May, Travis Atkison

Journal of Cybersecurity Education, Research and Practice

Detecting and mitigating wormhole attacks in wireless networks remains a critical challenge due to their deceptive nature and potential to compromise network integrity. This paper proposes a novel approach to wormhole detection by leveraging propagation delay analysis between network nodes. Unlike traditional methods that rely on signature-based detection or specialized hardware, our method focuses on analyzing propagation delay timings to identify anomalous behavior indicative of wormhole attacks. The proposed methodology involves collecting propagation delay data in both normal network scenarios and scenarios with inserted malicious wormhole nodes. By comparing these delay timings, our approach aims to differentiate between legitimate network …

How State Universities Are Addressing The Shortage Of Cybersecurity Professionals In The United States, Gary Harris

Journal of Cybersecurity Education, Research and Practice

Cybersecurity threats have been a serious and growing problem for decades. In addition, a severe shortage of cybersecurity professionals has been proliferating for nearly as long. These problems exist in the United States and globally and are well documented in literature. This study examined what state universities are doing to help address the shortage of cybersecurity professionals since higher education institutions are a primary source to the workforce pipeline. It is suggested that the number of cybersecurity professionals entering the workforce is related to the number of available programs. Thus increasing the number of programs will increase the number of …

The Perceptions Of Women In Ict Concerning Hybrid Work At Telecommunication Companies In South Africa, Ntombizethu Lubisi, Samwel Mwapwele

African Conference on Information Systems and Technology

This study examines the perceptions of women in ICT regarding the hybrid work model in South Africa's telecommunications sector, a shift accelerated by the COVID-19 pandemic. The research explores both the benefits—such as flexibility, financial savings, and improved work-life balance—and the challenges, including communication difficulties, collaboration issues, and infrastructural problems like power outages. Using a qualitative, interpretive approach, data were gathered through semi-structured interviews with 11 participants from 8 JSE-listed telecom companies. The key finding is that while the hybrid model is generally viewed favourably for supporting career development, the findings underscore the need for well-structured policies to ensure effective …

Stakeholder Perceptions Of A New Learning Management System Implementation At A South African University, Lazola Taho, Walter Uys

African Conference on Information Systems and Technology

Learning Management Systems (LMSs) investments are increasing in response to internal and external factors such as technology and market trends, laws, and regulations. Many LMS implementation initiatives fail despite decades of research on IS success. Challenges faced by sub-Saharan Africa Higher Education Institutions (HEI’s) LMS implementations are becoming context-specific to each institution. Studying implementation success quantitatively has however not provided adequate contextual insights into the complex dynamics of implementation. Research often investigates lecturers and students at the exclusion of other stakeholders. Using Critical Hermeneutics (CH) as a guiding perspective, semi-structured interviews were conducted with decision-makers, administrators, support staff, students, and …

Duramazwi Digital System (Modules Integration), Laiza Mumiriki, Surprise Prosper Chikotsi, Tafadzwa Muchaiwa

African Conference on Information Systems and Technology

This research paper explores the development of the Duramazwi Digital System, a comprehensive platform that integrates digital tools and technologies to enhance the experience of linguists and language learners. By combining the use of a dashboard, API, mobile app, and chatbot to provide users with seamless and interactive language learning experience. The study adopted the Activity Theory as its guiding theory for theoretical insights on natural language processing systems, language and learning. The methodology employed in this research follows the Design Science Research approach. The study utilizes various data collection techniques. The paper presents the system design and implementation details, …