Integrating Generative AI in Cybersecurity Education: Case Study Insights on Pedagogical Strategies, Critical Thinking, and Responsible AI Use

2025-02-21

AI Summary

Integrating generative AI into cybersecurity education risks fostering overreliance, exacerbating disparities in AI literacy, and imposing content limitations. Method: This study proposes a structured “AI-assisted policy generation—critical evaluation—optimization” pedagogical framework, implemented in two phases—tutorial exercises and assessment tasks—integrating large language models, formative assessment, and reflective learning to cultivate human-AI collaborative oversight competencies. Contribution/Results: The framework introduces the first closed-loop, AI-augmented teaching model that balances automation efficiency with expert judgment authority. Empirical evaluation demonstrates significant improvements in students’ capabilities for security policy evaluation, risk analysis refinement, and theory-to-practice transfer. Moreover, it effectively mitigates AI overreliance tendencies and reduces inter-student disparities in AI literacy, offering a scalable, generalizable paradigm for cybersecurity education in the age of intelligent systems.

Technology Category

• Humans and AI: Learning Human Values and Preferences
• Philosophy and Ethics of AI: Privacy & Security
• Search and Optimization: Learning to Search

Application Category

• Social Networks and Social Media: Generative AI / large language models and their impact on social systems
• Economics, Online Markets and Human Computation: Trust and reliance of crowd workers and data experts on GenAI
• Responsible Web: Machine-in-the-loop, human agency and autonomy

Abstract

The rapid advancement of Generative Artificial Intelligence (GenAI) has introduced new opportunities for transforming higher education, particularly in fields that require analytical reasoning and regulatory compliance, such as cybersecurity management. This study presents a structured framework for integrating GenAI tools into cybersecurity education, demonstrating their role in fostering critical thinking, real-world problem-solving, and regulatory awareness. The implementation strategy followed a two-stage approach, embedding GenAI within tutorial exercises and assessment tasks. Tutorials enabled students to generate, critique, and refine AI-assisted cybersecurity policies, while assessments required them to apply AI-generated outputs to real-world scenarios, ensuring alignment with industry standards and regulatory requirements. Findings indicate that AI-assisted learning significantly enhanced students' ability to evaluate security policies, refine risk assessments, and bridge theoretical knowledge with practical application. Student reflections and instructor observations revealed improvements in analytical engagement, yet challenges emerged regarding AI over-reliance, variability in AI literacy, and the contextual limitations of AI-generated content. Through structured intervention and research-driven refinement, students were able to recognize AI strengths as a generative tool while acknowledging its need for human oversight. This study further highlights the broader implications of AI adoption in cybersecurity education, emphasizing the necessity of balancing automation with expert judgment to cultivate industry-ready professionals. Future research should explore the long-term impact of AI-driven learning on cybersecurity competency, as well as the potential for adaptive AI-assisted assessments to further personalize and enhance educational outcomes.

Problem

• Integrating GenAI in cybersecurity education
• Enhancing critical thinking and regulatory awareness
• Balancing AI automation with expert judgment

Innovation

• GenAI in cybersecurity education
• Two-stage AI integration strategy
• AI-enhanced critical thinking skills