I feel like it's hard to teach cybersecurity formally. It deals with hacking and by nature the spirit of hacking is hard to teach. I have learnt cybersecurity a

I feel like it's hard to teach cybersecurity formally. It deals with hacking and by nature the spirit of hacking is hard to teach. I have learnt cybersecurity as a hobby and have competed with our university team in some online well known attack/defense style competitions (we sucked) and a lot of this stuff is really hard to formalize. I guess you could teach the basics like overflows, aslr, stack canaries, basic assembly, but in the end it's up to the hacker to string everything together to overflow a buffer, control the return pointer, leak the canary, string together a rop chain and pwn the system, and this takes a lot of tinkering and discovery rather than prior knowledge, although experience definitely helps. I guess it's also why some random high school teenager could be going up against the hacking team from Tencent in these competitions. And this is only for binary exploitation mind you. If you look at some of the crazy talks from defcon, the stuff they do draws upon a lot of random knowledge, and it comes down more to the act of piecing everything together than knowing anything before hand, hence the "hacking". And that's also why I love it :)