[论文解读] Beyond the Flag: A Framework for Integrating Cybersecurity Competitions into K-12 Education for Cognitive Apprenticeship and Ethical Skill Development

Tran Duc Le, Truong Duy Dinh+3 more|arXiv (Cornell University)|Feb 18, 2026

Information and Cyber Security被引用 0

一句话总结

提出 ECAC 框架，将 CTF 融入 K-12 教育，结合认知学徒制与伦理发展以扩大参与并培养可转移的网络安全技能。

ABSTRACT

Capture the Flag (CTF) competitions are powerful pedagogical tools for addressing the global cybersecurity workforce gap, yet their effective K-12 implementation is often undermined by significant barriers, including educator preparedness gaps and equity concerns. This paper addresses these challenges by proposing the Ethical-Cognitive Apprenticeship in Cybersecurity (ECAC) framework, a new model derived from a systematic Framework Synthesis of existing literature and empirical evidence. ECAC systematically integrates cognitive apprenticeship theory with embedded ethical development across five phases: (1) Foundational Modeling, (2) Scaffolding the Arena, (3) Coaching and Articulation, (4) Ethical Dilemma Injections, and (5) Reflective Exploration. The framework provides a "low floor, high ceiling" learning pathway designed to broaden participation among diverse student groups, including underrepresented minorities and women, while fostering deep, transferable skills. By reframing the educator role as a lead learner," ECAC also offers a sustainable solution to the teacher expertise gap. Ultimately, this framework provides a practical roadmap for transforming CTFs from standalone competitions into integral learning experiences that cultivate a more skilled, ethical, and diverse generation of cybersecurity professionals.

研究动机与目标

• 综合现有文献以识别 CTF 对 K-12 学习者的影响。
• 开发基于证据的框架（ECAC），将认知学徒制与 CTF 的伦理发展相结合。
• 解决平等性、教师准备度和 K-12 CTF 可扩展整合的障碍。
• 提出贯穿 K-12 的分阶段、符合年龄的实施计划，嵌入伦理。

提出的方法

• 对 25 篇关于 CTF 与游戏化网络安全教育在 K-12 情境中的同行评审论文进行框架综合分析。
• 四项指导性研究问题以提取影响、障碍、最佳实践与伦理整合。
• 主题分析将发现映射到认知学徒制与伦理构念。
• 开发包含五个阶段的 ECAC 框架：Foundational Modeling、Scaffolding the Arena、Coaching and Articulation、Ethical Dilemma Injections、Reflective Exploration。
• 跨文献互证以将组件 grounded 于既有证据。

Figure 1 . ECAC Framework.

实验结果

研究问题

• RQ1 RQ1: CTF 对 K-12 学生有哪些影响？
• RQ2 RQ2: 在 K-12 情境中实施 CTF 存在哪些障碍？
• RQ3 RQ3: 什么样的最佳实践/设计策略支持成功的 K-12 CTF 项目？
• RQ4 RQ4: 这些 CTF 项目如何处理伦理考虑？

主要发现

• CTF 风格的活动在密码学、取证、网络安全等领域提供了实际的网络安全技能习得。
• CTFs 提高参与度、动机和自我效能，低门槛高天花板的设计支持被代表性不足群体。
• CTFs 促进高阶思维与协作技能，培养安全思维。
• 伦理与数字公民教育应作为核心组成部分嵌入 CTF 基于学习的核心环节，而非事后考虑。
• 教师专业发展和分步任务是实现有效实施的关键障碍与促成因素。

Figure 2 . ECAC in Action: A Staged K-12 Implementation.