The ultimate goal of security awareness training is to make trainees adhere to safe computing practices. To meet this goal, training providers put much effort into designing the curriculum for security awareness programs. General computer users usually build their own ideas about computer security according to their daily usage and observations. Eventually, they accumulate a lot of misconceptions as well as their own assumptions. Therefore, instructors can use computer and network security demonstrations as anomalous data for training course participants.