Education DCL: EAGER: Re-imagining the Role of Humans in Security Education

生成式大型语言模型（llm）以其提供快速和全面的见解和信息的能力正在改变安全领域。llm现在被应用于几个重要的安全任务，包括特定于平台的事件响应、安全编程、二进制分析和渗透测试。随着自动化改变了我们所知道的安全实践，这个项目寻求更新安全教育，以便更好地将我们教学生的内容与现在的安全实践相结合。该项目的新颖之处包括创建一个新的课程，在学生的网络安全教育中使用法学硕士课程，以使他们为满足未来安全劳动力的需求做好准备。在这样做的过程中，该项目更广泛的意义和重要性将是使更多的学生能够利用法学硕士等现代工具来解决网络安全问题，包括那些技术背景较差的学生和那些来自代表性不足的群体的学生。该项目重新设计安全课程的方法围绕法学硕士安全课程的计划重组展开。新课程涉及应用法学硕士解决安全问题的不同方面：要求什么，要求哪种模型，如何要求，是否要求任务，以及结果是否值得信赖。通过将其融入计算机、网络、web和云安全的传统安全课程，学生将获得重要的见解和实用技能，然后他们可以使用这些知识为现代安全劳动力做出贡献。为了确保这个项目的结果是广泛可访问的，所有的课程和实验练习将通过公共存储库提供。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Generative large language models (LLMs) are transforming the field of security with their ability to provide fast and comprehensive insights and information. LLMs are now being applied to several important security tasks, including platform-specific incident response, secure programming, binary analysis, and penetration testing. With automation changing the practice of security as we know it, this project seeks to refresh security education in order to better align what we teach students to how security is now practiced. The project's novelties include creating a new curriculum that embraces the use of LLMs throughout a student's cybersecurity education in a way that prepares them to meet the demands of future security workforce. In doing so, the project's broader significance and importance will be to enable a broader pipeline of students who can leverage the use of modern tools such as LLMs to solve cybersecurity problems, including those with less technical backgrounds and those from underrepresented groups.The project's approach for redesigning security curricula centers around the planned restructuring of security curricula around LLMs. The new curriculum addresses different aspects of applying LLMs to solving security problems: what to ask for, which model to ask, how to ask for it, whether to task for it, and whether the result is trustworthy. By weaving this into traditional security courses in computer, network, web, and cloud security, students will gain important insight and practical skills that they can then use to contribute to the modern security workforce. To ensure the results of this project are broadly accessible, all curricula and lab exercises will be made available via public repositories.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.