EAGER: SaTC-EDU: Artificial Intelligence for Cybersecurity Education via a Machine Learning-Enabled Security Knowledge Graph

网络安全教育极具挑战性，因为其学习成果通常包含零散的信息，无法为学习者提供如何连接和建立他们所学概念的适应性指导。该项目将开发一种支持人工智能（AI）的网络安全工具，称为知识图（AISecKG），以应对这一网络安全教育挑战。被搜索引擎和社交网络广泛使用的知识图整合了数据，并可以存储对象、概念和事件等项目的链接描述。该项目通过为大学生提供灵活的学习计划，提高他们的批判性思维和解决问题的能力，为网络安全教育应用了一种新的学习方法。这种方法旨在帮助学生了解网络攻击和防御机制的复杂性，为他们提供一个整体的观点，并更好地准备他们解决现实世界的复杂性。AISecKG的开发和部署是跨学科的。首先，该项目采用机器学习（ML）和人工智能方法，通过测量和建立网络安全学习目标之间的相似性和依赖性来构建新的网络安全知识图，以进行学习规划和学习成果评估。其次，它采用多层次的评估方法来设计网络安全课程，支持学生的认知参与，并提高学生的学习成果。AISecKG有两个主要的设计目标。首先，它将指导教师根据他们的学习目标开发以问题为基础的学习课程。其次，它将允许学生应用自适应学习策略，结合动手实验室来评估他们的学习成果。为了定量评估学生的学习表现，AISecKG将（a）为基于问题的网络安全教育部署一个循证模型和学习材料，重点是在使用有针对性的材料和方法的同时发展教师的能力和实践;（B）为深度学习制定一个富有成效的教学模型，促进科学探究和设计的文化以及一套发展学生能力的战略;以及（c）提供学生学习成果的证据，作为教学资源，以支持学生在互动式学习任务中的认知参与。该项目得到了安全和值得信赖的网络空间（SaTC）计划的特别倡议的支持，以促进网络安全，人工智能和教育领域之间新的，以前未探索的合作。SATC计划与联邦网络安全研究和发展战略计划和国家隐私研究战略保持一致，以保护和维护网络系统日益增长的社会和经济效益，同时确保安全和隐私。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Cybersecurity education is exceptionally challenging because its learning outcomes often comprise fragmented information that fails to provide learners with adaptive guidance on how to connect and build on the concepts they have learned. This project will develop an artificial intelligence (AI)-enabled cybersecurity tool referred to as a knowledge graph (AISecKG) to address this cybersecurity education challenge. Knowledge graphs, widely used by search engines and social networks, integrate data and can store linked descriptions of items such as objects, concepts, and events. This project applies a novel learning approach for cybersecurity education by providing university students a flexible learning plan that enhances their critical thinking and problem-solving skills. This approach aims to help students understand the complex nature of cyber-attacks and defense mechanisms, provide them with a holistic view and better prepare them to address the complexities of real-world scenarios. The development and deployment of AISecKG are interdisciplinary. First, the project employs machine learning (ML) and AI approaches to build a new cybersecurity knowledge graph by measuring and setting up similarities and dependencies among cybersecurity learning targets for both study planning and learning-outcome assessment. Second, it incorporates a multi-level assessment approach to design cybersecurity curricula, scaffold student cognitive engagement, and improve student learning outcomes. AISecKG has two primary design goals. First, it will guide instructors to develop a problem-based learning curriculum based on their learning objectives. Second, it will allow students to apply an adaptive learning strategy, incorporating hands-on labs to assess their learning outcomes. To assess students’ learning performance quantitatively, AISecKG will (a) deploy an evidence-based model and learning materials for problem-based cybersecurity education focusing on developing teacher capacity and practice while using targeted materials and approaches; (b) produce a productive teaching model for deep learning that promotes a culture of scientific inquiry and design as well as a set of strategies to develop student competency; and (c) provide evidence of student learning outcomes as a pedagogical resource to support student cognitive engagement in learning tasks interactively. This project is supported by a special initiative of the Secure and Trustworthy Cyberspace (SaTC) program to foster new, previously unexplored, collaborations between the fields of cybersecurity, artificial intelligence, and education. The SaTC program aligns with the Federal Cybersecurity Research and Development Strategic Plan and the National Privacy Research Strategy to protect and preserve the growing social and economic benefits of cyber systems while ensuring security and privacy.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.