More specialized cybersecurity education programs are needed to address workforce needs, but it is unclear which knowledge, skills, and abilities (KSAs) fulfil industry needs. We interviewed 48 professionals within four cyber defense specialty areas: (1) Cyber Network Defense Analysis, (2) Cyber Network Defense Infrastructure Support, (3) Incident Response, and (4) Vulnerability Assessment and Management. The professionals rated a number of specialized KSAs along two dimensions: how important the KSA was to their job and how difficult the KSA was to learn. Overall, communication and other non-technical skills were rated as being very important for all cyber defense jobs. Findings indicated that, for some specialty areas, technical knowledge and skills vary considerably between jobs and so the ability to teach oneself is more valuable than proficiency in any one KSA. Findings may be used to inform the development of general cybersecurity curricula, as well as curricula that focus on Cyber Network Defense Analysis, Cyber Network Defense Infrastructure Support, or Vulnerability Assessment and Management.

中文翻译：

---

网络防御专业课程的知识、技能和能力

需要更专业的网络安全教育计划来满足劳动力需求，但尚不清楚哪些知识、技能和能力 (KSA) 可以满足行业需求。我们采访了四个网络防御专业领域的 48 位专业人员：(1) 网络网络防御分析，(2) 网络网络防御基础设施支持，(3) 事件响应，以及 (4) 漏洞评估和管理。专业人士从两个维度对一些专业的 KSA 进行了评分：KSA 对他们的工作有多重要，以及 KSA 的学习难度。总体而言，沟通和其他非技术技能被认为对所有网络防御工作都非常重要。调查结果表明，对于某些专业领域，技术知识和技能因工作而异，因此自学的能力比任何一个 KSA 的熟练程度都更有价值。调查结果可用于指导一般网络安全课程的开发，以及专注于网络网络防御分析、网络网络防御基础设施支持或漏洞评估和管理的课程。