| Abstract: | 網路釣魚是非常常見且造成巨大經濟損失的犯罪手法，透過教育使用者來達到提升全民網路安全素養是解決網路詐騙的根本之道。然而，網路釣魚手法日新月益、遭受挾持的品牌種類範疇持續擴大且遭受攻擊的受害人也有沿著社交網絡漫延的趨勢，因此想要設計一套能夠有效防止網路釣魚的教材，除了要能支援不斷進化的網路釣魚攻擊手法及持續演進的反釣魚概念外，尚需要透過社群活動的經營來提升全民反釣魚的意識。因此，針對反釣魚教材的收集與管理模式上提供學習者1)能易於理解的反釣魚內容、2)能支援練習與範例協助的反釣魚資源、3)能了解迷失概念所在的評量診斷、與4) 能互動、互享、互助的社群討論空間，才能有效地提升學習者的反釣魚學習經驗與成效。所以，本子計畫基於知識建構之學習理論與上述反釣魚學習的需求而規劃了一[反釣魚學習社群知識管理平台]，以提供教師可提升反釣魚教學效率與學習歷程分析診斷的反釣魚輔助教學環境，以及提供學生可有效學習與充分練習支援，並給予切適學習歷程之分析診斷，以提升其反釣魚學習成效。 本計畫之主要研究項目如下: (1) 研發反釣魚教學知識管理平台，包含1) 反釣魚教學內容編輯模組、及2) 反釣魚教學內容資源管理模組。以讓教師可有效率地編輯與管理各式反釣魚教學資源(概念模型架構、反釣魚互動式教材內容、反釣魚教育遊戲、評量試題)。並透過臺灣電腦網路危機處理暨協調中心(TWCERT/CC)的網路釣魚通報窗口(APNOW)所收集到最新的釣魚案例來充實反釣魚教材庫及試題庫。 (2) 研發反釣魚學習社群管理平台，包含1) 社群討論分析模組、2) 學習歷程分析模組。以提供學生在互動、互助、互享、及互評的反釣魚學習社群中，進行反釣魚課程學習的導引與練習，並獲得必要的學習支援(釣魚案例彙整與專家協詢)以及評量回饋與建議。 (3) 探討系統平台各功能服務與模式對於教師與學生在反釣魚教學上之成效與滿意度的分析。
The scopes and frequencies of phishing scams continue to increase dramatically, and cause enormous economic loss. Educating users to identify suspicious emails and websites is important to defense of phishing. However, phishing attack techniques keep evolving and the trend of spreading phishing is along social network. In order to prevent phishing effectively, we have to not only develop anti-phishing education materials which support evolving phishing attack techniques and anti-phishing concepts, but also run learning communities for improving people’s cognition of preventing phishing. Therefore, based on the learning theory of knowledge construction, this project aims to design and propose an Learning Community and Education Knowledge Management Platform in Anti-Phishing Education to assist teachers in anti-phishing education, resource management, assessment, and diagnosis, and to support students in anti-phishing learning, practice, cooperation, sharing, and peer-assessment. Thus, in this project, the research items and system modules that will be done are shown as follows: (1) Design and implement the Anti-Phishing Education Knowledge Management Platform, including 1) anti-phishing learning contents authoring module, and 2) anti-phishing learning resource management module, to support teachers in efficiently constructing and managing the learning resources. The collected phishing cases from APNOW, TWCERT/CC can update anti-phishing learning resource via our proposed platform. (2) Design and implement the Anti-Phishing Learning Community Management Platform, including 1) forum analysis module, and 2) learning portfolio learning module, to provide students with the learning guidance and practice and the assessment feedbacks in a sharable, interactive, and cooperative learning space. (3) Analyze and discuss the efficacy and satisfaction of proposed system services for teachers and student, respectively. |
