Abstract Because there is a critical shortage of cybersecurity talent, information security professionals and researchers should cultivate cybersecurity skills by encouraging individuals to pursue cybersecurity learning. However, some aspects of cybersecurity require substantial effort and perseverance for conceptual understanding to be gained. We propose motivation as the key to ensuring continuous engagement with and successful learning of such cybersecurity concepts. With a lab-based training program that taught participants about SQL injection attacks, we tested a research model that integrated flow theory and self-determination theory. Within the training program, we captured participants’ persistence in attempting and successfully completing the training exercises while also measuring their perceptions of motivation and flow. We found that flow facilitated motivation and its key antecedents. Flow and task significance had the strongest effects on motivation, while motivation fostered learning persistence and performance. We recommend training programs that maximize flow and task significance.

中文翻译：

---

培养网络安全学习：自决与流动的融合

摘要 由于网络安全人才严重短缺，信息安全专业人士和研究人员应通过鼓励个人进行网络安全学习来培养网络安全技能。然而，网络安全的某些方面需要大量的努力和毅力才能获得概念上的理解。我们建议将动机作为确保持续参与和成功学习此类网络安全概念的关键。通过向参与者教授 SQL 注入攻击的实验室培训计划，我们测试了一个整合了流理论和自决理论的研究模型。在培训计划中，我们捕捉到参与者尝试并成功完成培训练习的坚持，同时还衡量了他们对动机和流程的看法。我们发现心流促进了动机及其关键前因。心流和任务重要性对动机的影响最强，而动机则促进了学习的持久性和表现。我们推荐能够最大限度地提高流程和任务重要性的培训计划。