Teaching and Learning Cybersecurity using Capture the Flag: Effectiveness Comparison between University Students in Finland and Czechia

Teaching and Learning Cybersecurity using Capture the Flag: Effectiveness Comparison between University Students in Finland and Czechia

WoS Article

In today’s society, the demand for cybersecurity experts is increasing, as digital information systems are widely spread and targeted by malicious actors. This means that cybersecurity education should be effective in increasing students’ knowledge, skills, self-efficacy, and the ability to adapt and apply knowledge in rapidly evolving situations. Offering hands-on training with real-world-like scenarios and exercises, for example, in the form of Capture the Flag (CTF) games, is one component in teaching students the needed skills. In this research, we measure and compare the effectiveness of cybersecurity teaching with the gamified CTF scenario in the University 2 Cyber Arena (CA). We measure the effectiveness of CTF scenario with pre- and post-surveys among university students in Finland and Czechia, and examine effectiveness among different student groups. We also study student satisfaction and the perceived meaningfulness of the learning for different scenario elements, such as instructions, tasks, and gamification elements. The CTFs increased knowledge and skill variables, self-efficacy variables, and interest variables. CTFs can have positive effects on learning-related variables despite varying student’s base skills or level of knowledge, but different types of students may benefit in different ways. Student satisfaction and perceived meaningfulness of learning with CTF was also high across different student groups.

In today’s society, the demand for cybersecurity experts is increasing, as digital information systems are widely spread and targeted by malicious actors. This means that cybersecurity education should be effective in increasing students’ knowledge, skills, self-efficacy, and the ability to adapt and apply knowledge in rapidly evolving situations. Offering hands-on training with real-world-like scenarios and exercises, for example, in the form of Capture the Flag (CTF) games, is one component in teaching students the needed skills. In this research, we measure and compare the effectiveness of cybersecurity teaching with the gamified CTF scenario in the University 2 Cyber Arena (CA). We measure the effectiveness of CTF scenario with pre- and post-surveys among university students in Finland and Czechia, and examine effectiveness among different student groups. We also study student satisfaction and the perceived meaningfulness of the learning for different scenario elements, such as instructions, tasks, and gamification elements. The CTFs increased knowledge and skill variables, self-efficacy variables, and interest variables. CTFs can have positive effects on learning-related variables despite varying student’s base skills or level of knowledge, but different types of students may benefit in different ways. Student satisfaction and perceived meaningfulness of learning with CTF was also high across different student groups.

Capture the Flag; effectiveness; cybersecurity education; hands-on training; cyber range

Capture the Flag; effectiveness; cybersecurity education; hands-on training; cyber range

SCHAFEITEL-TÄHTINEN, T.; LAZAROV, W.

24.09.2025

COMPUTER APPLICATIONS IN ENGINEERING EDUCATION

33

5

United States of America

1

29

29

https://doi.org/10.1002/cae.70082