海角大神

Listening to Christopher Long describe teaching his subject makes parts of it sound like a breezy outdoor summer camp, not training for one of the most highly sought after, yet undertaught, skillsets in the country.

Capture the flag competitions and scavenger hunts are examples of what the fourth-year teacher of the course Cybersecurity Fundamentals calls 鈥済amification鈥� of his subject. But Mr. Long, a former network administrator who switched to teaching at South County High School in Lorton, Virginia, six years ago, knows that cybersecurity itself is no game.

鈥淭he tasks that they have to accomplish are things that if they get a job in cybersecurity, they鈥檒l do all the time,鈥� he says.

His district in Fairfax County, Virginia, outside of Washington, D.C., was the target last year of a cyberattack, one of 50 ransomware incidents against public K-12 schools reported across the United States in 2020 鈥� up from 11 in 2018. Mr. Long suggests that cybersecurity courses may become academic requirements in the years ahead and says this type of education is 鈥渄esperately needed.鈥� Some school districts are starting to agree, both for their defense and for their students鈥� futures.听

鈥淭he ransomware attacks that were happening in the K-12 systems were absolutely that light bulb moment for districts and, even state departments of education, to open their eyes up鈥� to teaching cybersecurity to听students,听says Kevin Nolten, director of academic outreach for CYBER.ORG, a Department of Homeland Security-backed organization, whose mission is to bolster K-12 cyber education.听

鈥淟ong-term solution鈥�

The urgency is being felt across the country. Districts like听Haverhill Public Schools, north of Boston, and听Baltimore County Public Schools听in Maryland, have had to cancel classes due to cyber attacks in recent years.

The Government Accountability Office called on the U.S. Department of Education this fall to take additional steps to help protect K-12 schools from cyber threats, but its recommendations were not pedagogical. They were geared toward getting the department鈥檚 leadership to prepare for the years ahead.

鈥淭his is a really hard challenge from a federal level because the federal government has very little role in education,鈥� says Laura Bate, a senior director of the Cyberspace Solarium Commission, a group tasked by Congress to devise a strategy to defend the United States in cyberspace.听

Ms. Bate calls education a 鈥渓ong-term solution鈥� to cybersecurity problems. 鈥淲e need to be able to teach this [subject] to our kids,鈥� she says.

The听number of high schools offering computer science has gone from 35% in 2018 to more than half of America鈥檚 high schools (51%)听in 2021. But only听4.7% of high school students are enrolled in a foundational computer science course,听a subject to which cybersecurity is a subfield, according to a听recent report听from听Code.org.听

In Florida, Broward County Public Schools, the target of a ransomware attack earlier this year, worked with CYBER.ORG to create K-12 cybersecurity standards for students and plans to offer specific training to teachers tied to these standards later this school year. Other states and localities will have the option to incorporate the new standards into their curricula.听

Monika Moorman, a fourth grade teacher at Broward County鈥檚 Central Park Elementary in Plantation, Florida, who worked on the national team of educators to craft听the standards, understands their importance for the students in her classroom.听

鈥淪tudents who are exposed to cybersecurity learning standards become better versed at navigating the online realm,鈥� the district鈥檚 2021 teacher of the year says, in an email to the Monitor. 鈥淭hey learn to understand the ramifications of their digital footprint which guides them in a responsible online behavior.鈥�

Taking steps in Virginia听

In Fairfax County, only about 2% of the district鈥檚 nearly 60,000 high schoolers take the elective class that Mr. Long teaches, where students learn both the ethics of the emerging area and the technical knowledge, such as how to run a command line on a Linux operating system.听

鈥淧eople hear a lot of things about 鈥榶ou shouldn鈥檛 do this, you should do that,鈥� but don鈥檛 really know why,鈥� says Mr. Long, in an interview last month, sitting at his desk after a full day of teaching. 鈥淎nd honestly, a lot of the kids don鈥檛 care too much until they actually see the why.鈥�

The students鈥� training doesn鈥檛 start with how to stop a ransomware attack. It starts with how to be a good digital citizen. One of the first lessons that Mr. Long teaches is cybersecurity ethics. The class explores, for example, intellectual property issues and the bootlegging or downloading of materials illegally.

The students are 鈥済rowing up in a generation where [bootlegging] is so mainstream that they鈥檝e never even considered the ethical issues,鈥� Mr. Long says. 鈥淭here鈥檚 a lot of people whose livelihoods depend on some of these services being paid and if you鈥檙e hacking to get free service, you鈥檙e potentially threatening the very service that you want to use.鈥�

For the digital-native students 鈥� some of whom have been online since they were toddlers 鈥� these lessons are eye-opening, their teacher says.听

The eye-opener for the district was last year鈥檚 ransomware attack. Fairfax County Public Schools听hired its first director of cybersecurity after the incident, which resulted in employees鈥� personal information and student disciplinary records being pilfered by the hackers and held for ransom. Even so, classes continued, and Mr. Long says the attack did not have as much influence on his students as the more publicized听Colonial Pipeline听cyber incident, which caused gas prices to rise in the area earlier this year.听

Whitney Ketchledge, Fairfax County Public Schools鈥� coordinator for career and technical education, says the class helps equip students for the world they鈥檒l engage in as consumers, but also she emphasizes the preparation that the class provides for a potential career.听

In addition to ethics, students in the class learn how a network operates, the perils of phishing attacks, and the basics of software programming.听

鈥淥ur students are looking for ways to make things better,鈥� says Dr. Ketchledge, in a Zoom interview. Separately, a handful of students from the district are gaining hands-on experience by interning with its department of information technology.听

There are about a听half a million cybersecurity job openings听in the United States, President Biden听said听from the White House in August. He called the vacancies a 鈥渃hallenge鈥� but also 鈥渁 real opportunity.鈥� Much of that opportunity though 鈥� both for cyber defense and cybersecurity education 鈥� lies in the hands of decision-makers outside of Washington.听听

As with personal finance classes, which started as electives and became required courses, a similar trend may be occurring with cybersecurity, Mr. Long says.听鈥淭here鈥檚 a good chance that there will be at least some version of cybersecurity that will start to fall into that category,鈥� he says. 鈥淚t鈥檚 going to become required knowledge.鈥�