Education DCL: EAGER: Re-imagining the Role of Humans in Security Education

产生式大型语言模型(LLM)以其提供快速、全面的洞察和信息的能力正在改变安全领域。LLMS现在被应用于几个重要的安全任务，包括特定于平台的事件响应、安全编程、二进制分析和渗透测试。随着自动化改变我们所知的安全实践，该项目寻求更新安全教育，以便更好地使我们教给学生的内容与现在如何实践安全保持一致。该项目的创新之处包括创建了一个新的课程，在学生的网络安全教育中使用LLMS，使他们做好准备，以满足未来安全劳动力的需求。在这样做的过程中，该项目的更广泛的意义和重要性将是使更广泛的学生渠道能够利用诸如LLMS等现代工具来解决网络安全问题，包括那些技术背景较少的人和来自代表不足的群体的人。该项目重新设计安全课程的方法围绕着围绕LLMS计划的安全课程重组。新课程解决了应用LLMS解决安全问题的不同方面：要求什么、要求哪种模型、如何要求、是否为其负责，以及结果是否值得信赖。通过将其融入计算机、网络、网络和云安全的传统安全课程，学生将获得重要的洞察力和实践技能，然后他们可以使用这些技能为现代安全员工队伍做出贡献。为了确保这个项目的结果被广泛获取，所有的课程和实验练习将通过公共资源库提供。这一奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

Generative large language models (LLMs) are transforming the field of security with their ability to provide fast and comprehensive insights and information. LLMs are now being applied to several important security tasks, including platform-specific incident response, secure programming, binary analysis, and penetration testing. With automation changing the practice of security as we know it, this project seeks to refresh security education in order to better align what we teach students to how security is now practiced. The project's novelties include creating a new curriculum that embraces the use of LLMs throughout a student's cybersecurity education in a way that prepares them to meet the demands of future security workforce. In doing so, the project's broader significance and importance will be to enable a broader pipeline of students who can leverage the use of modern tools such as LLMs to solve cybersecurity problems, including those with less technical backgrounds and those from underrepresented groups.The project's approach for redesigning security curricula centers around the planned restructuring of security curricula around LLMs. The new curriculum addresses different aspects of applying LLMs to solving security problems: what to ask for, which model to ask, how to ask for it, whether to task for it, and whether the result is trustworthy. By weaving this into traditional security courses in computer, network, web, and cloud security, students will gain important insight and practical skills that they can then use to contribute to the modern security workforce. To ensure the results of this project are broadly accessible, all curricula and lab exercises will be made available via public repositories.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.