Skip to main content

Motivating youth to learn STEM through a gender inclusive digital forensic science program


This paper describes the design, implementation and research of the Cyber Sleuth Science Lab (CSSL), an innovative educational program and supporting virtual learning environment, that combines pedagogical theory, gender inclusive instruction strategies, scientific principles/practices, gamification methods, computational thinking, and real-world problem solving. This program provides underrepresented youth, especially girls, with digital forensic knowledge, skills and career pathways, challenging them to explore complex social issues related to technology and to become cyber sleuths using real-world digital forensic methods and tools to solve investigative scenarios. Students also learn about related careers while improving their cyber street smarts. The CSSL incorporates additional “outside of the computer” activities to strengthen students’ engagement such as structured in-classroom discussions, mock trials, and in-person interactions with practitioner role models. The CSSL was piloted in various forms to assess the suitability for in-school and out-of-school settings, and the students predominantly represented racial minorities. Research in this project relied on a mixed methods approach for data collection and analysis, including qualitative and quantitative methods, reinforced using learning analytics generated from the students clicking through the interface and interacting with the system. Analysis of gathered data indicate that the virtual learning environment developed in this project is highly effective for teaching digital forensic knowledge, skills, and abilities that are directly applicable in the workplace. Furthermore, the strategies for gender inclusive STEM instruction implemented in CSSL are effective for engaging girls without being harmful to boys’ engagement. Learning STEM through digital forensic science taps into girls’ motivations to address real-world problems that have direct relevance to their lives, and to protect and serve their community. After participating in the educational program, girls expressed a significantly greater increase in interest, relative to boys, in learning more about careers related to digital forensics and cybersecurity.


Cybersecurity and cybercrime have become part of everyday life, creating diverse challenges and opportunities. Schools are experiencing a wide variety of problems involving technology, including cyberbullying and data breaches. Local governments, public institutions and schools are being disrupted by ransomware. Critical infrastructure are being targeted by sophisticated cyberattacks, creating significant actual or potential harm to the environment, economy, and human life (Casey & Nikkel, 2020). People are being targeted in their homes by online fraudsters and hackers. Investigating and solving these complex problems requires scientific reasoning, technical knowledge, computational thinking and mathematics all based on digital evidence, combined with social considerations (Casey, 2011). These problems are growing rapidly and there is a major shortage of qualified job candidates in Cybersecurity, which includes Digital Forensic Science, with 2.72 million unfilled positions in 2021 ((ISC)2, 2021). Responding to this growing need, some states are creating standards for high school cybersecurity programs, which include digital forensics and incident response (Nevada Department of Education, 2018; K12 Computer Science Framework Steering Committee, 2016; Perhach, 2018).

Notably, relatively few women enter this dynamic workforce sector (Center for Safety and Education, 2019; (ISC)2, 2021), representing just 25% of the workforce in 2021, which is in stark contrast to other forensic science disciplines which attract many more women than men (Barbaro, 2019). When women are not represented in the workforce, the field risks losing the diverse ideas and inputs that they bring with them (Ashcraft et al., 2012; Hill et al., 2010). This problem presents an opportunity for educators to meet the need for more traditionally underrepresented professionals in STEM related fields (Gonzalez, 2012) by providing the populations with the knowledge and skills needed to pursue careers in Digital Forensic Science and Cybersecurity, and to address the increasing number and severity of cyberattacks and cybercrimes.

Prior research specific to cybersecurity education for high school students in 1-week GenCyber summer camps found game based learning to be very effective (Jin et al., 2018). The GenCyber summer camp did not focus on implementing gender inclusive instruction, and boys expressed higher enjoyment and interest than girls. Research into factors contributing to girls’ engagement in informal STEM education, although not related to cybersecurity, found nine design attributes that are most effective for engaging girls without being harmful to boys’ engagement (Dancstep & Sindorf, 2018). These design attributes include the look-and-feel (engage), diagrams showing how to use an interactive element (guide), group participation and peer learning (collaboration and communication).

A primary research questions in this work is do underrepresented youth, especially girls, report being more interested in STEM after learning through realistic digital forensic investigations? A core component of this work was to evaluate the effectiveness of the CSSL for teaching digital forensic knowledge, skills, and abilities that are directly applicable in the workplace, and for motivating underrepresented youth, particularly girls, to pursue careers in Digital Forensic Science and Cybersecurity in particular, and computer science in general. The mystery solving focus of the CSSL provides ample opportunity to evaluate performance including comprehension, level of engagement, and knowledge development.

To address the growing need for underrepresented populations, especially girls, in digital forensic science and cybersecurity, this project combined state of the art learning science, gender inclusive instruction, innovative technology, and engaging subject matter to advance STEM education in informal settings. The novel contributions and significant outcomes of research and development performed in this project include:

Pedagogical model: Designed and developed a flexible, powerful, adaptable model and working proof-of-work learning environment that can be applied broadly to teaching other STEM disciplines.

Implementation strategies for gender inclusive STEM instruction: Constructed a set of strategies for researchers/developers to follow when implementing gender inclusive instruction in informal STEM education.

This paper provides motivation for teaching STEM through digital forensic science, describes the design and implementation of the CSSL, and presents the research method, data gathering and outcomes.


Digital Forensic Science was selected as the focus for this program in part because it is deeply rooted in STEM, combining scientific practices with in-depth analysis of technology, including hypothetico-deductive reasoning and computational thinking. In addition, Digital Forensic Science is inherently inquiry-based which is central to effective STEM education (Kim, 2016), and is strongly compatible with existing standards for science and technology education. In addition, the multidisciplinary nature of these domains, encompassing social issues such as justice, safety, privacy and ethics creates opportunities for students to think about and engage with science and technology from multiple perspectives. Prior work indicates that computer science education which integrates social justice and shows underrepresented youth how they can address problems in their community increases their interest in computer science education (Denner et al., 2015).

In particular, Digital Forensic Science and Cybersecurity are oriented to helping others deal with real-world problems (Boucher et al., 2017) and tap into the potential that young women “may be more attracted to science and technology related careers that involve complex social issues and societal impact” (Modi et al., 2012). Since one of the strongest predictors of young women’s interest in computing education is the extent to which they see value and relevance in computing, teaching STEM in the context of real-world problems that have direct relevance to students’ lives is vital for increasing levels of interest (Ashcraft et al., 2012; Christensen & Knezek, 2015). In addition, Digital Forensic Science and Cybersecurity provide youth with opportunities to protect and serve their community using science and technology, which provides strong motivation for learning STEM (Diekman et al., 2015).

Dealing with problems that youth find personally relevant, have social impact, and help others, the CSSL is designed to engage underrepresented youth, especially girls, in STEM learning and career pathways, while exploring complex issues associated with cybercrime (a reason to care). In particular, the CSSL supports girls with a responsive instructional environment, collaborative problem solving, and role models who are experts in the domain (Denner et al., 2015; Jethwani et al., 2016; Koch et al., 2015; Trujillo et al., 2015). Through immersive goal-based learning experiences, combining online and in-person classroom elements that cast students in the role of cyber-investigators, the CSSL helps students develop scientific reasoning, problem solving, technical knowledge, computational thinking, engineering, mathematics foundations, and practical skills, and equips them to pursue careers related to science, technology, engineering, mathematics and computing (STEM).


Creating the foundation necessary to support effective personally meaningful STEM education for underrepresented youth, particularly girls, was a significant effort in this project, combining pedagogical theory, gender inclusive instruction strategies, scientific practices, gamification methods, computational thinking, and real-world problem solving.

Model for inquiry-based pedagogical design

The CSSL is a blended learning program that combines a sophisticated virtual learning environment hosted in the cloud with rich goal-based scenarios and supporting educational resources to fuel in-classroom instructional activities and career pathway exploration. Specifically, the CSSL was developed using a problem based learning (PBL) pedagogical strategy, constructed around engaging goal-based scenarios, extending prior learning science work. Specifically, the design and development of the CSSL involved critical evaluation of an instructional model called Investigate and Decide Learning Environment (IDLE). The inquiry-based structure was adapted to teach Digital Forensic Science and Cybersecurity, and was augmented with the strengths of cognitive apprenticeship and case-based reasoning. In addition, this work reinforces and refines the design and implementation of inclusive STEM instruction. At each step in the structure of the investigative scenarios the project team considered how the principles of gender inclusive instruction could be incorporated, as elaborated on in the next section.

The IDLE model is suitable for scientific domains that involve evidence based conclusions (Bell, 1996, 1998). Combining this with cognitive apprenticeship and case-based reasoning integrates collaborative learning, structuring complementary cases, and practicing skills in diverse contexts (Collins et al., 1989).

Research shows that we learn best through a combination of theory and practice in a realistic context (Brown et al., 1989). Theory is inert until it is applied to a realistic situation, and practice is shallow without the influence of theory (Norman, 1993). In addition, students learn science and critical thinking more effectively when applying knowledge and skills to authentic situations (Duran & Dökme, 2016). Students are motivated by goal accomplishment, including intrinsic satisfaction of solving a case, and earning merit for acquiring skills (Schank et al., 1994).

The IDLE model emphasizes situated learning, but neglects the importance of students learning from each other and of designing investigative scenarios that are engaging and effective. Research indicates that practicing skills in a variety of contexts is the key to knowledge transfer.

As students learn to apply skills to more diverse problems and problem situations, their strategies become freed from their contextual bindings (or perhaps more accurately, acquire a richer net of contextual associations) and thus are more readily available for use with unfamiliar or novel problems

(Collins et al., 1989)

Careful attention is required to select and structure multiple instructional scenarios in a way that helps students arrange them in their minds, make generalizations, and understand important aspects (Kolodner, 1994; Schank, 1990, 1994; Schank & Abelson, 1977).

Gamification: creating narrative structure and casting students as cybersleuths

The CSSL extends and bolsters the IDLE model using gamification with carefully selected instructional scenarios structured to help students apply scientific practices and technical skills in diverse contexts to help students abstract and apply what they learn in varying situations to solve differing problems. The CSSL casts students as cybersleuths with a mission to accomplish, using cyber-pseudonyms to play the role and maintain anonymity. Missions are structured within an immersive virtual learning environment, steadily increasing in difficulty levels, with recognition for achieving each level. Student progress is tracked continuously within the CSSL, and is accessible to students to provide visibility into their own achievements and to compare with others as discussed in the data gathering section of this paper.

To structure and support problem solving, computational thinking, and hypothetico-deductive reasoning, the formation and execution of an evidence-based scientific investigation is explicit within the CSSL, providing students with a map of the cognitive processes and guiding them through the phases shown in Fig. 1. Each phase has a milestone marker at the bottom of the screen, and a map of the full process is always available in the top left of the screen for ease of navigation. For each mission, the initial Discover phase involves forming an investigative strategy, which is executed during the Investigate phase using digital forensic tools to process and analyze data. For more complex investigative missions, the Investigate phase is divided into parts with separate objectives and assessments. This is followed by the Evaluate phase which requires interpretation of evidence to support a decision. In the Report phase, students are required to compile their observations and conclusions into an objective, logical presentation (written and/or oral). The Reflect phase occurs in the classroom, with a guided group discussion about how students resolved challenges they encountered during the investigation, and about related ethics and social impact such as bias, privacy and justice.

Fig. 1
figure 1

Missions in the CSSL platform provide a cognitive map of an evidence-based scientific investigation process to guide students through each phase

The importance of dramatic structure cannot be underestimated when creating an engaging mission. Aristotle understood the importance of dramatic structure when he wrote “Poetics,” and Laurel elaborated on Poetics when she wrote “Computers as Theatre” (Laurel, 2013). Developing dramatic stories is a time consuming process but is necessary to create effective, engaging and enduring educational content. Missions in the CSSL were constructed with input from youth dealing with issues that are directly relevant to their lives, including cyberbullying, privacy, account hijacking, identity theft, anonymous harassment, unauthorized sharing of personal photographs. Specifically, the following missions were create in the CSSL with associated datasets for students to analyze using specialized software:

  • Mission 0 (Deleted Photos): A basic introductory mission involving recovery of deleted files from grandmother’s camera SD card, enabling students to become familiar with all elements of the CSSL.

  • Mission 1 (Cyberbullying by Phone): A student is cyberbullied anonymously via her phone, and deletes the upsetting messages. The mission is to recover the deleted messages, determine where the messages were sent from, follow a dead end, and then examine the suspected cyberbully’s phone for evidence of sent messages.

  • Mission 2 (Embarrassing Photo): An embarrassing photoshopped photo of a student is sent anonymously to everyone at a school. The student in the photo is very upset and needs help. The mission is to analyze forensic copies of mobile devices to determine who took/sent the photo.

  • Mission 3 (Account Hijacking): A student receives a phishing email that tricks her into disclosing her password. Her account is then used to solicit financial donations to a fraudulent charity cause. She needs help proving that she was not responsible for the fraud. The mission is to analyze email headers, server log files, and phishing website to determine where the phishing attack came from (IP address).

Throughout all missions, the CSSL integrates scientific practices and reasoning, technical knowledge and skills, computer science concepts and programming, and social issues and societal impact. Each analytical task within the Investigate phase involves constructing a plan to search the provided data in order to find evidence relevant to the investigation. This plan is then executed applying scientific practices and using real-world digital forensic tools, and the results are extracted to address specific questions the students must answer. Discrete programming tasks teach students to write code for processing data and extracting information.

This immersive experience enables students to rapidly acquire fluency in the skills and knowledge, supported by resources and facilitator supports. Casting students as cybersleuths gives them an active and positive role to play, and creating missions with personally relevant real-world problem-based scenarios gives them a reason to care.

Framework for implementing gender inclusive instruction

An overarching consideration throughout the CSSL is to bring into practice the principles and strategies of effective gender inclusive instruction in informal STEM education. Specifically, the CSSL codifies eight principles of effective design and instruction, particularly for girls: (1) Engage and Empower, (2) Enculturate, (3) Immerse, (4) Guide, (5) Practice and Iterate, (6) Synthesize, (7) Collaborate and Communicate, and (8) Reflect. These eight principles support and extend the seven SciGirls strategies (Billington et al., 2019), and are further informed by recent research into gender inclusive strategies (Hughes et al., 2020). The successful approach to implementing gender inclusive instruction in STEM education in this project provides a set of strategies for others to follow. Table 1 shows the alignment of these eight principles with specific elements implemented in the CSSL program.

Table 1 Implementation strategies for gender inclusive STEM instruction

It was challenging to find contexts to teach only girls, and many environments in which the CSSL can be beneficial are coed. To deal with this reality, efforts were made to incorporate supports specifically to help girls in coed environments. These supports included increasing in- classroom activities (e.g., mock trial, Socratic circle), group work for peer learning support, relevance of investigative scenarios to their daily lives, young female role-models and in- classroom facilitators (near peers), and educator and facilitator awareness of the importance of providing girls with personal positive feedback and promoting a growth mindset (Denner & Campe, 2018; Trujillo et al., 2015).

Research shows that the learning environment must be safe and inclusive, with a look-and-feel that is inviting and allows girls to form a sense of belonging (Hubert, 2014; Sammet & Kekelis, 2016). To create a learning environment with an inclusive and inviting look-and-feel, the CSSL conducted initial student focus groups to guide the design, including character representation, robot/space themes, and color scheme (see Fig. 1 above). In 2019, to evaluate the suitability and success of the resulting design and development, several student groups were surveyed and another focus group was held. Feedback determined that there was a need to better represent diversity and not try to “erase” it by making characters blue. In response to this feedback, the project team developed the redesign of three primary student characters and Dr. Z (the character that assigns missions and provides information and clues to solve the case). The refined look-and-feel of the virtual learning platform is shown in Fig. 2 below.

Fig. 2
figure 2

The CSSL platform look-and-feel was updated after 2019 based on student focus group and survey feedback, shown here in Mission 3, which exhibits increased complexity for students to develop and apply what they learn in earlier missions


The project research and development strategy concentrated on informal education settings, iteratively improved based on participant feedback, and stress tested the program to determine whether it could serve the needs of in-school and online only education. Educational settings were selected based on their inclusion of underrepresented youth, predominantly racial minorities in Baltimore, New Orleans, Las Vegas, and a Seattle school district. The CSSL modular design allows for flexibility to adapt materials to different educational settings. This flexibility allowed the program to be tested in a single day session, multiple full-day sessions, and across multiple weeks in different formats. Single day sessions focused on one mission with limited duration in-classroom activities and role model engagement, whereas longer sessions permitted expansion of all aspects of the CSSL program.

  • 2017–2018: Focus groups and design sessions, driving intensive development of platform with pedagogical foundation, and curriculum reinforcing scientific principles & practices, and critical & computational thinking.

  • 2018–2019: Successful 1-week pilot with 79 students (40% female) conducted simultaneously in four classrooms, as part of a larger summer program serving Baltimore City public school. Lessons learned improved subsequent implementation of principles/strategies of gender inclusive instruction, and realized the educational value of live learning analytics to support teaching visibility into student progress.

  • 2019–2020: Stress testing with: (a) an expanded summer program hosted by a Seattle school district, supported by Washington Network for Innovative Careers (WANIC), lasting 3 weeks (78 total hours), with 12 students (50% female), (b) in-school simulation with one hour per day during 5-week summer work-study program, with a total of 32 students (40% female) in two classrooms, and (c) workshops.

  • 2020–2021: Super stress testing fully online, incorporated into the curriculum (42 total hours) at two high schools in Las Vegas reaching four teachers and 93 students in grades 9-11 (39% female).

A deliberate process of iterative improvement was followed to incorporate lessons learned from each pilot, including insights from formative evaluations, feedback from participants, and input from advisory board members. This process included student focus groups to improve learning activities and resources, and teacher focus groups to improve teaching materials and tools. In addition to the primary pilots, portions of the CSSL program were presented to Girl Scouts and larger events to obtain feedback and to motivate more girls to consider career and education pathways related to Digital Forensic Science and Cybersecurity.

Implementation and technology

Throughout the program, students are led by educators who have been familiarized with the CSSL platform and materials. Students work independently and in groups, depending on the task and preference of the educator. Learning supports for students are embedded within the CSSL platform to provide needed technical skills and fundamental scientific and technical concepts. In addition, reference materials are always accessible to student within a resources section of the virtual learning environment. An electronic Notebook is integrated into missions for students to follow scientific practices (e.g., contemporaneous note-taking, documentation), and to capture what they learned for assessments and reporting.

The CSSL is structured to encourage collaborative learning and employs near peer facilitators to enhance student advancement and learning (Denner & Campe, 2018; Denner et al., 2015; Trujillo et al., 2015). When meeting in-person, facilitators support educators and students by circulating in classrooms to address technical issues and student questions.

The technology platform integrated a web-based virtual learning environment with a cloud-based virtual machine laboratory, enabling educators and students to immerse in the CSSL from anywhere. Traditionally, both a web browser and remote desktop application were required to access remote systems and applications, which complicated accessibility. To eliminate barriers to entry, the CSSL made all areas and resources available via a single web interface.

The virtual machine laboratory provides students with access to professional software tools and realistic investigative challenges to solve as shown in Fig. 3. In the words of the pioneers in situated cognition, people learn best when learning “to use the tools as practitioners use them” (Bell, 1996). Missions involve technology that students use personally, particularly smartphones, increasing their familiarity with the technology and associated risks.

Fig. 3
figure 3

Cloud-based virtual machine laboratory (Virtual Toolkit) with digital forensic tools for students to examine datasets as part of the investigative missions

A role model and mentor network of practicing scientists and industry experts, being developed in collaboration with the National Girls Collaborative Project (NGCP) online role model directory, FabFems (, gives youth opportunities to interact with adult role models and gain deeper insights into career pathways. Classroom activities provide additional support and role model engagement.

Research method and data gathering

Research in this project relied on a mixed methods approach for data collection and analysis:

  • Qualitative examination of student and teacher interview and focus group data to identify patterns and themes of student engagement, interest, and motivation to learn more, as well as themes of teacher fulfillment and future needs.

  • Quantitative analysis of multiple choice and Likert-scaled survey items using descriptive statistics to perform comparisons of student knowledge and skill level before and after completing the CSSL curriculum, and to understand changes in student understanding and interest.

  • Qualitative examination of responses to open-ended survey items to identify patterns and themes of strengths and weaknesses in CSSL program.

  • Examination of backend metrics to understand patterns of student use and program progression, i.e., learning analytics resulting from the students clicking through the interface, interacting with the system, and completing tasks.

Data gathering

Multiple methods were used to gather data from students, and each instructional module contained formative assessments to determine whether students performed technical and problem solving tasks correctly, and summative assessments to determine whether they understood the overall mission. When time permitted, students wrote reports and presented their work in class. These written reports and oral presentations provided valuable insights into student understanding, and gave students an opportunity to develop their communication skills when presenting evidence-based conclusions. Students were surveyed before and after the program to assess their attitudes, knowledge and experiences.

In 2019, the CSSL platform was augmented to gather detailed backend metrics to study how students use the platform, where they encounter challenges, and what areas require additional scaffolding. Preliminary analysis of these data was performed in this work, and more in-depth analysis is planned in future work to refine the effectiveness of the CSSL platform. Data sources included field notes from classroom observations, notes from focus groups and interviews, multiple-choice and Likert-scale surveys, student artifacts, and backend user metrics.

For all in-person pilots, one or more of the project team members were on-site to observe classroom activities, and field notes were compiled. The final online pilot required remote observations due to COVID constraints, which was constrained by policy and technology barriers, with most visibility into one of the two classrooms. These observations were looking for students’ level of engagement, peer-learning and group work dynamics, interactions between students and educators (teachers and facilitators), and technical difficulties using the virtual learning environment.

On the last day of the program, students in all locations completed a survey focused on their overall experience in the program and its impact on their knowledge and awareness of digital forensic science and cybersecurity, as well as their awareness of and interest in related careers. Multiple-choice and Likert-scale survey questions addressing student interest, knowledge, and motivation to learn more, were developed by the project team and student surveys were administered pre and post pilots.

Student focus groups were conducted towards the end of the program to gain a deeper understanding of students’ experience in the program. Students also filled out a short reflection sheet during cycles 1 and 2 when they completed the missions to gather their thoughts about the specific digital module they worked on. Teacher focus groups were held at the end of the program to review challenges and successes, capture lessons learned, and identify gaps to be filled. All participating teachers and facilitators were interviewed either during site visits or by phone either near or shortly after the end of the program to gather information about their experience implementing CSSL. Instructors and facilitators also completed a survey during the first implementation of the program.

Note that facilitators were not interviewed or surveyed during the final cycle of implementation because the COVID-19 pandemic prohibited bringing in outside facilitators. Student artifacts, including final investigative reports in earlier pilots, increased for the Seattle 2019 pilot with class timeline creation, mock trial preparation, and written artifacts. The Seattle 2019 pilot also Individualized Learning Plans (IEP) and exit tickets to track student achievements.

Backend metrics

Backend metrics from the project virtual platform/curriculum that includes embedded assessment data of student knowledge and skills, were recorded to study how each student was progressing through the CSSL curriculum. The research team used the backend metrics as a data source to look at student performance in the following ways:

  • Student performance on discrete tasks within each mission, which require the student to examine digital evidence. Backend metrics capture when students accessed the virtual toolkit to examine data, when they completed each task, and how successfully they performed the task.

  • For each discrete task, the student is required to provide information about the digital evidence in order to solve the case. Backend metrics capture student answers and record whether the answer is correct or incorrect.

  • Whether or not the student accessed additional instructional resources.

This quantitative data is useful for addressing research questions, and provides the type of transparency that is a necessary requirement for progress tracking and classroom management in computer-mediated instruction contexts, especially distance learning.

Teacher use of learning analytics

The initial intent was to use backend metrics to produce learning analytics just for research. However, immediately following the Baltimore 2018 pilot, while reviewing the backend metrics during a teacher focus group, it became clear that teachers would have benefited from having visibility into the learning analytics in real-time while they were helping students complete activities. The teachers specifically requested that the learning analytics be made accessible in a way that they could use while teaching. In response, the project team developed the Teacher Dashboard (Fig. 4) which displays learning analytics to provide visibility into student participation and progress in each mission, performance on formative assessments and summative assessments, as well as to enable tracking of students working in pairs or groups. This resource enables teachers to keep their finger on the pulse of student learning and to steer the class through challenges together.

Fig. 4
figure 4

Teacher Dashboard with learning analytics for all students in a session, used to manage learning activities and track progress of individuals and groups

In Fig. 4, each row in the Teach Dashboard shows the progress of a student through a given mission, with small solid circles indicating accomplishments that students on their own, and red outlined small circles indicating accomplishments that students accomplished together as a group or through teacher-led activities. The student assessments embedded within the mission are represented by larger circles with percentage success. Shading within each circle shows the level of completion as indicated in Key (top right). Exclamation points within a circle (see Fig. 5 below) are used to alert that a student needs help, prompting the facilitator or teacher to provide additional assistance.

Fig. 5
figure 5

Student Personal Dashboard with learning analytics for all missions, allowing each student to see their own progress and compare with others

Student use of learning analytics

Based on the usefulness of the Teacher Dashboard to provide transparency and insight into student progress, this tracking mechanism was used to provide students with their Personal Dashboard, enabling each student to see their own progress (Fig. 5). Teachers used this tracking mechanism throughout the CSSL program to have students view their own individual progress and see what they still need to improve or complete. Students could use this tracking mechanism to compare their progress with others. In Fig. 5 showing data from 2019, the Mission 3 was not yet integrated into the platform to populate learning analytics, and was completed in-class. Mission 3 is now integrated into the platform to capture learning analytics.

Analysis and outcomes

Student and teacher interview notes and open-ended survey responses were analyzed using a constructivist grounded theory approach (Charmaz, 2006) to identify patterns and themes related to themes of student engagement, interest, and motivation to learn more, as well as themes of teacher fulfillment and future needs. Quantitative analysis of normalized pre-post survey responses was performed, comparing girls with boys, to produce descriptive statistics to understand changes in student understanding and interest.

Backend metrics were aggregated and analyzed to study student progress and performance through tasks and assessments, enabling analytics-reinforced research. A synopsis of analysis of all data collected during the project is provided in Table 2. Some data was limited during the initial development of the project as the platform and program were still under development. The 2020–2021 pilot in Nevada was complicated by COVID constraints, and efforts are ongoing to fill gaps in visibility of student engagement and performance.

Table 2 Summary of results (*Technology posed an issue in collecting releases from students and their family which impacted our ability to also collect student artifacts from the students.)

Comparative analysis of pre-post surveys

The paired-samples t-test comparing by gender of pre-post survey results related to research questions are presented in Table 3 below.

Table 3 Paired-samples t-test comparison by gender of students’ understanding of and interest in digital forensic science and related careers based on retrospective pre-post survey questions

For all statements, both males and females saw gains that were statistically significant and with mostly moderate to large effect sizes. One notable difference in the strength of the effect size based on gender was the question “I would like to learn more about careers in computer science like digital forensics and cybersecurity,” where the effect is size was moderate for females and small for males. In contrast, the statement “I am interested in computer science topics” showed the inverse, with a small effect size strength for females, and moderate for males. These findings suggest that both males and females are benefitting equally from the CSSL experience in terms of interest in and understanding of digital forensics as well as seeing the relevance of digital forensics to their everyday life. When asked about their interest in learning more about related careers, girls expressed a more significant rise in interest than boys after participating in the CSSL program.

The independent samples t-test comparing by gender of pre-post survey results related to research questions are presented in Table 4 below.

Table 4 Independent samples t-test comparison by gender of students’ understanding of and interest in digital forensic science and related careers based on retrospective pre-post survey questions

Comparing retrospective pre-test and post-test means by gender, only a few differences were statistically significant. Females were less likely than males to come into the program with an interest in computer science and feeling confident they could explain something about digital forensics to someone else. Post-test scores show that females were no longer significantly different from males in their confidence explaining digital forensics; however, they were still significantly less likely than males to report an interest in computer science.

The independent samples t-test comparing by gender of pre-post survey results related to satisfaction questions are presented in Table 5 below.

Table 5 Independent samples t-test comparison by gender of students’ satisfaction based on retrospective pre-post survey questions

Comparing four statements about their overall feelings about their CSSL experience, there were no significant differences between females and males. They were both equally likely to report that they understood how to use the CSSL digital platform, thought it was a fun way to learn, would like to participate in similar programs in the future, and would recommend CSSL to a friend. Therefore, the strategies for gender inclusive STEM instruction implemented in CSSL are effective for engaging girls without being harmful to boys’ engagement.


A significant outcome of this research project is that the virtual learning environment developed in this project was highly effective for teaching digital forensic knowledge, skills, and abilities that are directly applicable in the workplace. This high effectiveness and engagement was evident throughout the project, through formative evaluations and in-class observations, as well as backend metrics showing the agility and speed with which the students acquired knowledge and skills, and progressed through the investigative tasks, despite the complex and challenging nature of the program. In addition, all participants developed a heightened awareness of security and privacy risks associated.

In addition, survey results and in-class observations across pilots found that girls relied more, relative to boys, on in-classroom supports than on supports embedded in the virtual learning environment. Girls actively engaged in group work and unplugged (outside of the computer) instructional activities such as structured in-classroom discussions, mock trial, Socratic circle, class timeline construction, interactions with female practitioner role models, rehearsing presentations and recording (e.g., FlipGrid for teacher feedback, report peer discussion and revision, etc.). Students who were engaged in the program particularly enjoyed the mock trial exercise examining the role digital evidence can play in a legal setting and discussing ethics in technology.

Increased interest, understanding, and motivation in STEM

Another significant outcome of this research project is that the CSSL is effective for motivating underrepresented youth, particularly girls, to pursue education/careers in digital forensic science and cybersecurity in particular, and computer science in general. Across all pilots, in the aggregate, the majority of girls and boys who participated in the CSSL program were motivated and engaged by their experiences, and developed an increased knowledge and interest in digital forensic science and cybersecurity. There was an overall increase in interest among both girls and boys in using digital forensic tools to solve problems, and all students gained increased awareness of careers related to digital forensic science and cybersecurity and the experiences of professionals in these careers. Students were motivated and empowered by playing the role of investigators and getting hands-on experience with real-world digital forensic tools to help someone recover deleted data or deal with cyberbullying. An important aspect of this research outcome is that gender inclusive instruction in co-ed environments helps girls without discouraging boys.

One of the major outcomes of this research program was that, after participating in the CSSL program, girls expressed a more significant increase in interest than male students in learning more about careers related to digital forensics and cyber security.

In open ended survey questions, a primary motivation stated by girls was the direct relevance of the lessons to their daily lives, including online fraud and data privacy. Girls were more likely to mention personal connections to cyber safety, how it affects them personally, and what they would do differently (e.g., “[I] need to be more careful with passwords—I'll change mine after this course.”), while boys talked more about a general awareness of cybersecurity (e.g., “I didn't know that deleted messages could be found again”). These results are compatible with prior research findings that girls learning STEM are more motivated by real-world problems that have direct relevance to their lives, and are interested in protecting and serving their community using science and technology (Ashcraft et al., 2012; Christensen & Knezek, 2015; Diekman et al., 2015; Modi et al., 2012). Learning STEM through digital forensic science fulfills these motivations by addressing real-world problems and social issues such as safety, privacy, and justice.

A number of girls were interested in ongoing participation with the CSSL project, and are actively seeking educational opportunities in this field. One former student returned as a facilitator in 2019 and other students requested letters of support and recommendations as they pursue STEM related degrees.

Cyber street smart and digital citizenship

This project embedded lessons about dealing with online risks and data privacy concerns. These lessons helped students develop cyber street smarts, including being better prepared to protect privacy, to practice safe/responsible behavior online, and to avoid problems in cyberspace (e.g., protecting personal information, preventing cyberbullying, resisting phishing attacks), and skills and knowledge to help others with problems including data recovery and digital forensic investigations. All participants in the CSSL developed a heightened awareness of security and privacy risks associated.

Conclusions and future needs

The CSSL program provides a rich multidisciplinary learning experience, combining STEM with social issues. The virtual learning environment developed in this project is highly effective for teaching digital forensic knowledge, skills, and abilities that are directly applicable in the workplace. The CSSL was designed and developed to bring into practice the principles and strategies of effective gender inclusive instruction in informal STEM education. These supports included increasing in-classroom activities (e.g., mock trial, Socratic circle), group work for peer learning support, relevance of investigative scenarios to their daily lives, young female role-models and in-classroom facilitators (near peers). After participating in the CSSL program, girls expressed a significantly greater increase in interest, relative to boys, in learning more about careers related to digital forensics and cybersecurity.

Students enjoy learning in the virtual learning environment through investigative missions, and also benefit from “outside of the computer” activities such as structured in-classroom discussions, mock trials, and in-person interactions with practitioner role models. Girls favored such in-classroom activities more, relative to boys, who tend to prefer seeking supports in the virtual learning environment. Teaching STEM through digital forensic science taps into girls’ motivations to address real-world problems that have direct relevance to their lives, and to protect and serve their community. The strategies for gender inclusive STEM instruction implemented in CSSL are effective for engaging girls without being harmful to boys’ engagement.

Although the CSSL can be adapted to fit within different contexts and schedules, there are limits to this flexibility. The CSSL program is most effective when there is sufficient time for students to complete discrete activities. Although certain activities can be learned and completed in one hour, others require longer blocks of time, particularly complex technical tasks and longer activities such as a mock trial. Integrating the CSSL into a school curriculum requires a carefully arranged combination of hour-long sessions, some longer in class periods for complex technical tasks and mock trials, as well as assigned homework (e.g., report writing). When educators and facilitators had more time, they took the opportunity to incorporate additional materials that were of particular interest to them and the students, including references to current or local events. This had the added benefit of getting the facilitators more involved and engaged with the program and students.

As a future need, educators and facilitators expressed the need for additional professional development. On average, educators received 2 days of professional development prior to the CSSL program. Although this was sufficient for educators to become familiar with the platform and missions, they consistently expressed the need for more time to become familiar with the subject matter concepts and associated social issues. The educator in the Seattle 2019 pilot worked more closely with CSSL team members prior to implementation in order to learn subject matter and to adapt the curriculum for her class. This prolonged personal collaboration enabled the educator to be more confident and creative in the classroom, and established a strong relationship the CSSL team to provide support. Educators in other pilots had to learn on the job and had limited time to obtain support from the CSSL team, which made it more difficult to following the instructor guide for each module. In the future, if feasible, more comprehensive professional development will be created to give educators and facilitators an opportunity to learn about Digital Forensic Science and Cybersecurity, and to experience the entire program and platform from the perspective of a student. Teachers need more PD and ongoing community/material supports, both in the subject matter and gender inclusive instruction strategies. Teachers require additional time to explore the concepts/contexts, prepare for classroom implementation, and raise awareness of gender inclusive instruction practices such as providing girls with personal positive feedback and promoting a growth mindset. Such PD would increase teacher familiarity with the subject matter (concepts, processes and tools) and social context/impact, and the pedagogical approach for inquiry-based gender inclusive instruction.

This project identified needs/gaps in current curriculum that spawned the idea for future work that combines justice-oriented and culturally-responsive pedagogy and critical justice and expectancy-value theory to develop guided personalized learning pathways. Through this theoretical lens these individualized pathways could capitalize on underrepresented youth’s personal resources (i.e., lived experiences, funds of knowledge, personal community support network) to boost disciplinary learning, STEM identity development and industry community. This could strengthen community connections supported by technology with the goal of increasing the presence, persistence and impact of these students in the future workforce.

Availability of data and materials

Aggregate data provided in work.

Code availability

Source code availability not applicable. Screenshots of user interface provided in work.



Cyber Sleuth Science Lab


Investigate and Decide Learning Environment


National Girls Collaborative Project


Science Technology Engineering Math


Washington Network for Innovative Careers


  • Ashcraft, C., Eger, E., & Friend, M. (2012). Girls in IT: The facts. National Center for Women Information Technology.

    Google Scholar 

  • Barbaro, A. (2019). Women in forensics: An international overview. Forensic Science International: Synergy, 1, 137–139.

    Google Scholar 

  • Bell, B. L. (1996). A special-purpose architecture for the design of educational software (Tech. Rep. No. 70). Northwestern University, The Institute for the Learning Sciences.

  • Bell, B. L. (1998). Investigate and decide learning environments: Specializing task models for authoring tool design. The Journal of Learning Sciences, 7, 65–105.

    Article  Google Scholar 

  • Billington, B., Britsch, B., Santiago, A., Schellinger, J., Carter, S., & Becker, N. (2019). SciGirls strategies, how to engage girls in STEM. Retrieved from,

  • Boucher, K. L., Fuesting, M. A., Diekman, A. B., & Murphy, M. C. (2017). Can I work with and help others in this field? How communal goals influence interest and participation in STEM fields. Frontiers in Psychology, 8, 901.

    Article  Google Scholar 

  • Brown, J. S., Collins, A., & Duguid, P. (1989). Situated cognition and the culture of learning. Educational Researcher, 18, 32–42.

    Article  Google Scholar 

  • Casey, E. (2011). Digital evidence and computer crime: Forensic science, computers and the internet (3rd ed.). Academic Press.

    Google Scholar 

  • Casey, E., & Nikkel, B. (2020). Forensic analysis as iterative learning. In D. M. M. Keupp (Ed.), The security of critical infrastructures. Springer International.

    Chapter  Google Scholar 

  • Center for Safety and Education. (2019). “Women in Cybersecurity,” Cybersecurity Workforce Study. Retrieved from,

  • Charmaz, K. (2006). Constructing grounded theory: A practical guide through qualitative analysis. SAGE.

    Google Scholar 

  • Christensen, R., & Knezek, G. (2015). Active learning approaches to integrating technology into middle school science classrooms: Reconceptualizing a middle school science curriculum based on 21st century skills. In X. Ge, D. Ifenthaler, & J. M. Spector (Eds.), Full Steam Ahead: Emerging Technologies for STEAM. Springer Academic.

    Google Scholar 

  • Collins, A., Brown, J. S., & Newman, S. E. (1989). Cognitive apprenticeship: Teaching the crafts of reading writing and mathematics. In L. B. Resnick (Ed.), Knowing, learning, and instruction: Essays in honor of Robert Glaser, ed. L. Resnick (pp. 140–185). Lawrence Erlbaum Associates.

    Google Scholar 

  • Dancstep, T., & Sindorf, L. (2018). Exhibit designs for girls’ engagement (EDGE). Curator, 61, 485–506.

    Article  Google Scholar 

  • Denner, J., & Campe, S. (2018). Equity and inclusion in computer science education. In S. Sentence (Ed.), Computer science education in school: Perspectives on teaching and learning (pp. 189–206). Bloomsbury.

    Google Scholar 

  • Denner, J., Martinez, J., Thiry, H., & Adams, J. (2015). Computer science and fairness: Integrating a social justice perspective into an after school program. Science Education and Civic Engagement: An International Journal, 6(2), 41–54.

    Google Scholar 

  • Diekman, A. B., Weisgram, E. S., & Belanger, A. L. (2015). New routes to recruiting and retaining women in STEM: Policy implications of a communal goal congruity perspective. Social Issues and Policy Review, 9(1), 52–88.

    Article  Google Scholar 

  • Duran, M., & Dökme, I. (2016). The effect of the inquiry-based learning approach on student’s criticalthinking skills. Eurasia Journal of Mathematics, Science & Technology Education, 12(12), 2887–2908.

    Article  Google Scholar 

  • Gonzalez, H. B. (2012). An analysis of STEM education funding at the NSF: trends and policy discussion. In Congressional research service. Retrieved April 15, 2020.

  • Hill, C., Corbett, C., & St Rose, A. (2010). Why so few? Women in science, technology, engineering, and mathematics. American Association of University Women. 1111 Sixteenth Street NW, Washington, DC 20036.

  • Hubert, T. L. (2014). Learners of mathematics: High school students’ perspectives of culturally relevant mathematics pedagogy. Journal of African American Studies, 18(3), 324–336.

  • Hughes, R., Schellinger, J., Billington, B., Britisch, B., Carter, S., & Santiago, A. (2020). Summary of research related to gender equitable teaching and learning in STEM spaces. Journal of STEM Outreach, 3(1), 1–9.

    Article  Google Scholar 

  • (ISC)2. (2021). Cybersecurity Workforce Study, 2021 . Retrieved from,

  • Jethwani, M. M., Memon, N., Seo, W., & Richer, A. (2016). “I can actually be a super sleuth”: Promising practices for engaging adolescent girls in cybersecurity education. Journal of Educational Computing Research, 0735633116651971.

  • Jin, G., Tu, M., Kim, T.-H., Heffron, J., & White, J. (2018). Evaluation of game-based learning in cybersecurity education for high school students. Journal of Education and Learning (EduLearn), 12(1), 150–158.

    Article  Google Scholar 

  • K12 Computer Science Framework Steering Committee. (2016). K-12 computer science framework. Retrieved from,

  • Kim, H. (2016). Inquiry-based science and technology enrichment program for middle school-aged female students. Journal of Science Education Technology, 25(2), 174–186.

    Article  Google Scholar 

  • Koch, M., Lundh, P., & Harris, C. J. (2015). Investigating STEM support and persistence among urban teenage African American and Latina girls across settings. Urban Education, 0042085915618708.

  • Kolodner, J. (1994). From natural language understanding to case-based reasoning and beyond: A perspective on the cognitive model that ties it all together. In R. C. Schank (Ed.), Beliefs, reasoning and decision making (pp. 55–110). Lawrence Erlbaum Associates.

    Google Scholar 

  • Laurel, B. (2013). Computers as theater (2nd ed.). Addison-Wesley Professional.

    Google Scholar 

  • Modi, K., Schoenberg, J., & Salmond, K. (2012). Generation STEM: What girls say about science, technology, engineering, and math. Girl Scouts of the USA.

    Google Scholar 

  • Nevada Department of Education. (2018). Cybersecurity Standards. Nevada State Board of Education. Retrieved from, (

  • Norman, D. (1993). Things that make us smart. Addison-Wesley.

    Google Scholar 

  • Perhach, P. (2018). The mad dash to find a cybersecurity force. New York Times, 7 November 2018. Retrieved from,

  • Schank, R. C. (1990). Tell me a story: Narrative and intelligence. Northwestern University Press.

    Google Scholar 

  • Sammet, K., & Kekelis, L. (2016). Changing the game for girls in STEM: Findings on high impact programs and sys- tem-building strategies.

  • Schank, R. C. (1994). Goal-based scenarios: A radical look at education. The Journal of Learning Sciences, 3, 429–453.

    Article  Google Scholar 

  • Schank, R. C., & Abelson, R. (1977). Scripts, plans, goals and understanding. Lawrence Erlbaum Associates.

    Google Scholar 

  • Schank, R. C., Fano, A., Bell, B., & Jona, M. (1994). The design of goal-based scenarios. The Journal of Learning Sciences, 3, 305–345.

    Article  Google Scholar 

  • Trujillo, G., Aguinaldo, P. G., Anderson, C., Bustamante, J., Gelsinger, D. R., Pastor, M. J., Wright, J., Marquez-Magana, L., & Riggs, B. (2015). Near-peer STEM mentoring offers unexpected benefits for mentors from traditionally underrepresented backgrounds. Perspectives on Undergraduate Research and Mentoring.

Download references


Thanks to the educators and staff in Baltimore, New Orleans and Everett, Jill Denner for guidance on research, Jennifer Jocz and Jessica Brett at EDC, Brad Smith and the HotPepper development team, and Stephanie Burns for her inspiration with the Career Quest.


NSF STEM + C #1640107 STEM Integration in the Digital Forensics Science Learning Environment Grades 9-12.

Author information

Authors and Affiliations



EC, KP, DP and CS contributed to the learning environment components. EC and KP developed the framework for implementing gender inclusive instruction, and articulated in the context of STEM education. EC and JJ analyzed and interpreted interview notes and open-ended survey responses. EC, DP and CS developed all missions, learning environment, and implementation. All authors read and approved the final manuscript.

Author’s information

Eoghan Casey is an internationally recognized expert in digital forensic science, and he has taught students and conducted research at University of Lausanne School of Criminal Sciences and the Johns Hopkins University Information Security Institute. He has a PhD in Computer Science, a Masters in Educational Communication & Technology, and he created Smartphone Forensics courses taught worldwide. His combined experience in academia, government and private sector builds bridges between theory and practice. He has authored several technical books covering digital evidence and cybercrime investigation, including the foundational book Digital Evidence and Computer Crime, now in its third edition. He is a member of the Digital/Multimedia Scientific Area Committee in the NIST OSAC to strengthen forensic science. Eoghan is Editor-in-Chief of Forensic Science International: Digital Investigation and is on the Board of Directors of the Digital Forensic Research Workshop (DFRWS) Conference.

Jennifer Jocz is Senior Research Associate at Education Development Center (EDC), and has nearly 10 years of experience in program evaluation and research, with a focus on STEM learning in both formal and informal environments. She has expertise in the design and management of evaluation studies, including logic model development and the use of both qualitative and quantitative evaluation methods. In addition to her research and evaluation work, Jocz also has experience in STEM outreach, having worked as a science communicator and volunteer museum educator with the goal of making science accessible for all audiences. Jocz holds an MEd in Learning and Teaching and an MA in Molecular Biology from Harvard University.

Karen A. Peterson is the Founder and CEO for the National Girls Collaborative, with more than 30 years of experience in education as a classroom teacher, university instructor, teacher educator, program administrator, and researcher. From 2002 to 2017, Peterson served as the Principal Investigator for the National Girls Collaborative Project (NGCP). Designed by Peterson, the NGCP seeks to maximize access to shared resources for public and private sector organizations interested in expanding girls’ participation in STEM. The overarching goal of the NGCP is to use the leverage of a network or collaboration of individual girl-serving STEM programs to create the tipping point for gender equity in STEM. NGCP is now an independent non-profit continuing to fulfill the original NSF-funded mission as well as expanding globally and nationally. Peterson is currently Co-PI for five NSF grants that address gender, racial, and socioeconomic underrepresentation in STEM fields, and who access the NGCP’s national network and dissemination tools to distribute, scale-up, and/or replicate project outcomes.

Daryl Pfeif is currently a Co-PI on the Cyber Sleuth Science Lab, Founder of Digital Forensics Solutions (DFS) and COO/Founding Board Member of a non-profit research working group that hosts global forensics events for leaders in education, government, and industry. Daryl has been actively engaged in the field of digital forensics and cyber security since 2004, supervising forensics investigations, security auditing and analysis, data breach management, training, and research. DFS has developed custom forensics software applications for NIST, The Department of Justice, and DARPA. Prior to DFS, Daryl specialized in interactive media, with an emphasis on 3-D animation, web/computer based training, distance learning, and emerging web technologies.

Cassy Soden is a multimedia producer, writer, and story strategist developing the Cyber Sleuth Science Lab/DFSLE platform and content. She has produced online video content for Seattle Public Schools including professional development on a range of topics from K-5 science, to reading, to race and equity. She is especially interested in telling stories that create learning opportunities, reflect peoples' inspiring passions, encourage positive change, and deepen cultural understanding. Cassy served as a Senior Producer/Writer & Curriculum Graphics Producer for Content Inventions on University of Washington’s Communities That Care, an extensive web video training series (120 videos) supported by the National Institutes of Health and Educurious, a high school curriculum program funded by the Bill & Melinda Gates Foundation (50 biology and language arts videos). Prior to working with Content Inventions, Cassy produced videos and animations for the Bill & Melinda Gates Foundation featuring grantee stories, and for Catalytica, Inc., highlighting the Lumina Foundation’s effort to expand higher education opportunities.

Corresponding author

Correspondence to Eoghan Casey.

Ethics declarations

Ethics approval and consent to participate

This work is original and has not been published previously, and does not contain plagiarism. All researchers, authors, evaluators and participants in this project abided by ethical requirements of NSF. This work obtained consent from all participants.

Consent for publication

Include appropriate statements

Competing interests

The authors have no conflicts of interest.

Additional information

Publisher's Note

Springer Nature remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.

Rights and permissions

Open Access This article is licensed under a Creative Commons Attribution 4.0 International License, which permits use, sharing, adaptation, distribution and reproduction in any medium or format, as long as you give appropriate credit to the original author(s) and the source, provide a link to the Creative Commons licence, and indicate if changes were made. The images or other third party material in this article are included in the article's Creative Commons licence, unless indicated otherwise in a credit line to the material. If material is not included in the article's Creative Commons licence and your intended use is not permitted by statutory regulation or exceeds the permitted use, you will need to obtain permission directly from the copyright holder. To view a copy of this licence, visit

Reprints and permissions

About this article

Check for updates. Verify currency and authenticity via CrossMark

Cite this article

Casey, E., Jocz, J., Peterson, K.A. et al. Motivating youth to learn STEM through a gender inclusive digital forensic science program. Smart Learn. Environ. 10, 2 (2023).

Download citation

  • Received:

  • Accepted:

  • Published:

  • DOI: