The Problem

A common approach when using virtual machines for assessments is to utilise a "one size fits all " template. Particularly when working with large student cohorts. However, this approach can often introduce limits to the scope, scale and creativity of authentic assessments, due to a lack of differentiation in assessment scope.

Authentic Learning (as described in [1]) provides opportunities for students to engage in "learning activities that are either carried out in real-world contexts, or have high transfer to a real-world setting". According to [2], there is "...a call for more emphasis to be placed on authentic learning as it provides an environment that cultivates students who would be prepared for the complex working world". This aligns with guidance from the Office for Students (OfS) who have defined expectations for student continuation levels, employment and further study after graduation.

Who are the principal stakeholders of this project?

• Lecturers, Instructors

• Students

What are principal aims of this problem book?

In this problem book forum, we will explore opportunities for creating authentic learning activities and assessments, that utilise virtual machines. The aims are to provide resources that:

• are free to use for learners.

• are free to use for academics.

• are authentic learning focused.

• are authentic assessment focused.

• are scalable and adaptable to multiple use case scenarios.

Automation

A key area of interest is the use of scripting and automation to create customised virtual machines, on a per student basis, at scale! Through automation, variability and differentiated levels of complexity can be improved.

What are the indicative objectives of this project?

To collaboratively design, create, share, optimise and validate authentic cyber security learning activities. Objectives include:

• Share experiences and examples of current virtual machine-centric learning labs.

• Design, create, implement and test scripts to auto-generate uniquely customised virtual machines for use in digital forensics, security testing, networking, asset monitoring, log file analysis, etc.

• Create an authentic learning framework that centres on scalable, plug and play virtual machine networks, that aligns with CyBOK Knowledge Areas.

• Create and validate a series of themed lab activities (e.g. digital forensics, networking, firewalls, subnets, security testing, etc.).

• Share outputs as open source resources for use in the cyber security education community.

What are the anticipated outputs and outcomes of this project?

• Shared scripts and techniques for auto-generating customised virtual machines

• Shareable virtual machines

• Shared authentic learning activities

• Shared authentic assessment activities

References

[1] J. H. Galindo, “Authentic Learning (Simulations, Lab, Field),” The Derek Bok Center for Teaching and Learning. [Online]. Available: https://ablconnect.harvard.edu/authentic-learning. [Accessed: 08-Apr-2023].

[2] C.Lee, “Authentic learning: What is it, and why is it important?,” Turnitin, 07-Apr-2023. [Online]. Available: https://www.turnitin.com/blog/authentic-learning-what-is-it-and-why-is-it-important-subtitle-essentials-series. [Accessed: 09-Apr-2023].