{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,25]],"date-time":"2026-06-25T11:08:02Z","timestamp":1782385682426,"version":"3.54.5"},"reference-count":30,"publisher":"Emerald","issue":"3","license":[{"start":{"date-parts":[[2023,2,16]],"date-time":"2023-02-16T00:00:00Z","timestamp":1676505600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.emerald.com\/insight\/site-policies"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["ICS"],"published-print":{"date-parts":[[2023,6,26]]},"abstract":"<jats:sec>\n<jats:title content-type=\"abstract-subheading\">Purpose<\/jats:title>\n<jats:p>Cybersecurity training plays a decisive role in overcoming the global shortage of cybersecurity experts and the risks this shortage poses to organizations' assets. Seeking to make the training of those experts as efficacious and efficient as possible, this study investigates the potential of visual programming languages (VPLs) for training in cyber ranges. For this matter, the VPL Blockly was integrated into an existing cyber range training to facilitate learning a code-based cybersecurity task, namely, creating code-based correlation rules for a security information and event management (SIEM) system.<\/jats:p>\n<\/jats:sec>\n<jats:sec>\n<jats:title content-type=\"abstract-subheading\">Design\/methodology\/approach<\/jats:title>\n<jats:p>To evaluate the VPL\u2019s effect on the cyber range training, the authors conducted a user study as a randomized controlled trial with 30 participants. In this study, the authors compared skill development of participants creating SIEM rules using Blockly (experimental group) with participants using a textual programming approach (control group) to create the rules.<\/jats:p>\n<\/jats:sec>\n<jats:sec>\n<jats:title content-type=\"abstract-subheading\">Findings<\/jats:title>\n<jats:p>This study indicates that using a VPL in a cybersecurity training can improve the participants' perceived learning experience compared to the control group while providing equally good learning outcomes.<\/jats:p>\n<\/jats:sec>\n<jats:sec>\n<jats:title content-type=\"abstract-subheading\">Originality\/value<\/jats:title>\n<jats:p>The originality of this work lies in studying the effect of using a VPL to learn a code-based cybersecurity task. Investigating this effect in comparison with the conventional textual syntax through a randomized controlled trial has not been investigated yet.<\/jats:p>\n<\/jats:sec>","DOI":"10.1108\/ics-11-2022-0170","type":"journal-article","created":{"date-parts":[[2023,2,14]],"date-time":"2023-02-14T06:48:08Z","timestamp":1676357288000},"page":"316-330","source":"Crossref","is-referenced-by-count":8,"title":["Improving cybersecurity skill development through visual programming"],"prefix":"10.1108","volume":"31","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0239-7526","authenticated-orcid":false,"given":"Magdalena","family":"Glas","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1119-4715","authenticated-orcid":false,"given":"Manfred","family":"Vielberth","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7458-9928","authenticated-orcid":false,"given":"Tobias","family":"Reittinger","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0023-6051","authenticated-orcid":false,"given":"Fabian","family":"B\u00f6hm","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1338-9003","authenticated-orcid":false,"given":"G\u00fcnther","family":"Pernul","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"140","published-online":{"date-parts":[[2023,2,16]]},"reference":[{"issue":"5","key":"key2023062211345577000_ref001","doi-asserted-by":"crossref","first-page":"35","DOI":"10.1109\/MSP.2014.103","article-title":"The operational role of security information and event management systems","volume":"12","year":"2014","journal-title":"IEEE Security and Privacy"},{"issue":"5","key":"key2023062211345577000_ref002","first-page":"1","article-title":"Formalizing and integrating user knowledge into security analytics","volume":"3","year":"2022","journal-title":"SN Computer Science"},{"key":"key2023062211345577000_ref003","article-title":"SANS 2022 SOC Survey","year":"2022"},{"key":"key2023062211345577000_ref004","article-title":"The cybersecurity workforce gap","year":"2019"},{"key":"key2023062211345577000_ref005","article-title":"A survey of cyber ranges and testbeds","year":"2013"},{"issue":"1","key":"key2023062211345577000_ref006","doi-asserted-by":"crossref","first-page":"6","DOI":"10.1080\/00461520.2011.538645","article-title":"Interactions of metacognition with motivation and affect in self-regulated learning: the MASRL model","volume":"46","year":"2011","journal-title":"Educational Psychologist"},{"issue":"2","key":"key2023062211345577000_ref007","doi-asserted-by":"crossref","first-page":"5","DOI":"10.1016\/S1361-3723(17)30013-1","article-title":"Can\u2019t get the staff? The growing need for cyber-security skills","volume":"2017","year":"2017","journal-title":"Computer Fraud and Security"},{"key":"key2023062211345577000_ref008","first-page":"3","article-title":"Visual programming in cyber range training to improve skill development","volume-title":"Human Aspects of Information Security and Assurance","year":"2022"},{"issue":"9","key":"key2023062211345577000_ref009","doi-asserted-by":"crossref","first-page":"904","DOI":"10.1177\/154193120605000909","article-title":"NASA-task load index (NASA-TLX); 20 years later","volume":"50","year":"2006","journal-title":"Proceedings of the Human Factors and Ergonomics Society Annual Meeting"},{"key":"key2023062211345577000_ref010","doi-asserted-by":"crossref","first-page":"139","DOI":"10.1016\/S0166-4115(08)62386-9","article-title":"Development of NASA-TLX (task load index): results of empirical and theoretical research","volume":"52","year":"1988","journal-title":"Advances in Psychology"},{"issue":"2","key":"key2023062211345577000_ref011","doi-asserted-by":"crossref","first-page":"225","DOI":"10.1108\/ICS-10-2020-0173","article-title":"Cybersecurity educational games: a theoretical framework","volume":"30","year":"2022","journal-title":"Information and Computer Security"},{"key":"key2023062211345577000_ref012","article-title":"A Resilient Cybersecurity Profession Charts the Path Forward \u2013 ISC2 Cybersecurity Workforce Study 2021","author":"ISC2","year":"2021"},{"key":"key2023062211345577000_ref013","first-page":"25","article-title":"Towards a cyber-physical range","year":"2019"},{"issue":"3","key":"key2023062211345577000_ref014","doi-asserted-by":"crossref","first-page":"2","DOI":"10.1007\/BF02905780","article-title":"Development and use of the ARCS model of instructional design","volume":"10","year":"1987","journal-title":"Journal of Instructional Development"},{"key":"key2023062211345577000_ref015","first-page":"885","article-title":"Teaching cybersecurity with networked robots","year":"2019"},{"key":"key2023062211345577000_ref016","doi-asserted-by":"crossref","first-page":"51","DOI":"10.1016\/j.chb.2014.09.012","article-title":"Review on teaching and learning of computational thinking through programming: what is next for K-12?","volume":"41","year":"2014","journal-title":"Computers in Human Behavior"},{"key":"key2023062211345577000_ref017","doi-asserted-by":"crossref","first-page":"109095","DOI":"10.1109\/ACCESS.2021.3101245","article-title":"Cyexec*: a high-performance container-based cyber range with scenario randomization","volume":"9","year":"2021","journal-title":"IEEE Access"},{"key":"key2023062211345577000_ref018","article-title":"The Cyber Range: A Guide","author":"National Initiative for Cybersecurity Education (NICE)","year":"2020"},{"key":"key2023062211345577000_ref019","article-title":"Cybersecurity Workforce Framework","year":"2017"},{"key":"key2023062211345577000_ref020","doi-asserted-by":"crossref","first-page":"1479","DOI":"10.1016\/j.sbspro.2015.04.224","article-title":"Learning basic programming concepts by creating games with scratch programming environment","volume":"191","year":"2015","journal-title":"Procedia - Social and Behavioral Sciences"},{"issue":"4","key":"key2023062211345577000_ref021","doi-asserted-by":"crossref","first-page":"478","DOI":"10.1108\/TG-05-2022-0073","article-title":"Human-driven and human-centred cybersecurity: policy-making implications","volume":"16","year":"2022","journal-title":"Transforming Government: People, Process and Policy"},{"key":"key2023062211345577000_ref022","first-page":"211","article-title":"Milo: a visual programming environment for data science education","year":"2018"},{"key":"key2023062211345577000_ref023","first-page":"2253","article-title":"A framework for designing a security operations centre (SOC","year":"2015"},{"key":"key2023062211345577000_ref024","first-page":"2009","article-title":"Cognitive load in ecommerce applications \u2013 measurement and effects on user satisfaction","volume":"2009","year":"2009","journal-title":"Advances in Human-Computer Interaction"},{"issue":"3","key":"key2023062211345577000_ref025","doi-asserted-by":"crossref","first-page":"316","DOI":"10.1111\/1467-8527.t01-1-00178","article-title":"The need for randomised controlled trials in educational research","volume":"49","year":"2001","journal-title":"British Journal of Educational Studies"},{"key":"key2023062211345577000_ref026","doi-asserted-by":"crossref","first-page":"224","DOI":"10.1016\/j.chb.2018.11.038","article-title":"Improving students\u2019 understanding of basic programming concepts through visual programming language: the role of self-efficacy","volume":"95","year":"2019","journal-title":"Computers in Human Behavior"},{"key":"key2023062211345577000_ref027","doi-asserted-by":"crossref","first-page":"227756","DOI":"10.1109\/ACCESS.2020.3045514","article-title":"Security operations center: a systematic study and open challenges","volume":"8","year":"2020","journal-title":"IEEE Access"},{"key":"key2023062211345577000_ref028","first-page":"293","article-title":"A digital twin-based cyber range for SOC analysts","year":"2021"},{"key":"key2023062211345577000_ref029","first-page":"1","article-title":"Lessons learned from complex hands-on defence exercises in a cyber range","year":"2017"},{"key":"key2023062211345577000_ref030","doi-asserted-by":"crossref","first-page":"101636","DOI":"10.1016\/j.cose.2019.101636","article-title":"Cyber ranges and security testbeds: scenarios, functions, tools and architecture","volume":"88","year":"2020","journal-title":"Computers and Security"}],"container-title":["Information &amp; Computer Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.emerald.com\/insight\/content\/doi\/10.1108\/ICS-11-2022-0170\/full\/xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.emerald.com\/insight\/content\/doi\/10.1108\/ICS-11-2022-0170\/full\/html","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,25]],"date-time":"2025-07-25T01:23:21Z","timestamp":1753406601000},"score":1,"resource":{"primary":{"URL":"http:\/\/www.emerald.com\/ics\/article\/31\/3\/316-330\/104058"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,2,16]]},"references-count":30,"journal-issue":{"issue":"3","published-online":{"date-parts":[[2023,2,16]]},"published-print":{"date-parts":[[2023,6,26]]}},"alternative-id":["10.1108\/ICS-11-2022-0170"],"URL":"https:\/\/doi.org\/10.1108\/ics-11-2022-0170","relation":{},"ISSN":["2056-4961","2056-4961"],"issn-type":[{"value":"2056-4961","type":"print"},{"value":"2056-4961","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,2,16]]}}}