TY - JOUR JO - Security & Privacy, IEEE TI - Guarding the castle keep: teaching with the fortress metaphor T2 - Security & Privacy, IEEE IS - 3 SN - 1540-7993 VO - 2 SP - 69 EP - 72 AU - Frincke, D.A. AU - Bishop, M. Y1 - May-June 2004 PY - 2004 KW - computer science education KW - security of data KW - castle keep KW - computer security KW - fortress metaphor KW - pedagogical tool KW - student understanding VL - 2 JA - Security & Privacy, IEEE DOI - 10.1109/MSP.2004.13 AB - The computer security field is replete with metaphors - the original and most commonly used metaphor is the computer (or network) as a fortress, the walls of which must be guarded against potential breaches. This metaphor is useful, but like all metaphors, it is not precise. Understanding the differences, between the metaphor of a fortress and the realities of securing a system is crucial to students understanding the subtleties of computer security. We discuss the fortress metaphor as a pedagogical tool, both how it succeeds and how it fails to aid student understanding. ER -