Raising Awareness for IT Security in Higher Education - A Teaching Experiment on SQL Injection for Non-Computer Science Majors

This is a preliminary case study examining the use of a hands-on IT security activity to raise awareness regarding IT security issues at undergraduate non-major students with little or basic knowledge in SQL and programming. In order to communicate IT security to this target group in an understandable and clear sense, the learning scenario focuses only on the specific threat caused by SQL injection. The evaluation of the scenario by questionnaires proved the potential of hands-on SQL injection exercises and simulating a hacker attack as a successful approach for IT-security education.