Evaluating hands-on labs for teaching SQL injection: a comparative study

Hands-on labs have been proved to be effective in improving students learning and motivation. This paper presents the results of an assessment study conducted to compare hands-on labs for teaching SQL Injection. Two hands-on labs were selected as control group and experimental group teaching methods respectively. The goal is to find out whether one hands-on lab is more effective than the other hands-on lab in terms of improvement in student learning outcomes, student motivation, and student experiences. Our study results can provide insights for instructors of cybersecurity in selecting appropriate teaching tools for their classes.