Chapter 18 — Research methods I

Chapter 18 — Research methods I

Lesson map

Lesson 18 published. Map, example, EX052.

flowchart TD
  N0["Learning outcomes"]
  N1["18.1 A researchable question"]
  N2["18.2 Searching sources"]
  N3["18.3 Ethical planning"]
  N4["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4
  N4 --> EX["Worked example"]
  EX --> Q["Exercise EX052"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["18.1 A researchable question"]
  N2["18.2 Searching sources"]
  N3["18.3 Ethical planning"]
  N4["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4 --> Q["EX052"]

[Learning outcomes]
    |
    v
[18.1 A researchable question]
    |
    v
[18.2 Searching sources]
    |
    v
[18.3 Ethical planning]
    |
    v
[Synthesis]
    |
    v
[Worked example] --> [Exercise EX052]

Learning outcomes

You will (1) formulate a researchable question about cryptographic practice; (2) search literature and standards systematically; (3) plan a small study ethically.

18.1 A researchable question

Priya wants to study how library staff respond to TLS certificate warnings. She refines a vague interest into a researchable question: "When shown a simulated certificate warning on a staff training site, what share of Tidewell staff proceed, and does a one-page explanation reduce that share?" The question names a population, a measurable behaviour and an intervention. Dr. Echeverría points out that a simulation must be clearly separate from real systems, so staff are never put at risk. She refines the wording twice.

18.2 Searching sources

Priya searches academic databases for studies of security warnings, records search terms and dates, and reads RFC 8446 and RFC 5280 to describe what warnings indicate technically. She keeps a table of sources with each study's population, method and findings, noting which used laboratory participants and which observed real browsing. She distinguishes peer-reviewed studies from vendor reports and records every source's full citation, verifying links before adding them to her bibliography. She also asks the university librarian to check her search strategy, which leads her to two relevant studies she had missed.

18.3 Ethical planning

The study involves people, so Priya applies to the university's ethics committee. Her plan explains that participation is voluntary, responses are anonymous, the warning appears only on a training site with no real data, and participants are debriefed afterwards with the explanation of why warnings matter. Grace confirms the consortium's support in writing. The committee asks her to ensure managers never see individual results, which she adds. Ethical review shapes design, not just paperwork. She also prepares a plain-language information sheet for participants.

Worked example

Priya writes a specific question about certificate warnings, keeps a sourced literature table, and obtains ethics approval for an anonymous training-site simulation with debriefing.

Synthetic case. The study is invented; RFC 8446 and RFC 5280 are real.

Errors and limits

Simulations may not reflect real behaviour under pressure. Studies with staff must protect them from employment consequences.

Exercises

• EX052 — Question parts. What three elements make the question researchable? Rubric: 3 = population, measurable behaviour, intervention;; 2 = two;; 1 = one;; 0 = none.
• EX053 — Source table. What does Priya record for each study? Rubric: 3 = population, method, findings (and lab versus real browsing);; 2 = two;; 1 = citation only;; 0 = none.
• EX054 — Committee request. What did the ethics committee ask Priya to add? Rubric: 3 = ensure managers never see individual results;; 2 = anonymity;; 1 = vague;; 0 = none.

Synthesis

Researchable questions, systematic sources and ethical design turn curiosity about cryptographic practice into a credible study.

Continue studying — chapter 18 of 40

← Chapter 17 (draft) · Course chapter index · Chapter 19 (draft) →