A Data-Driven Adaptive Cybersecurity Training Framework with Behavioral Validation
International Journal of Networked and Distributed Computing, cilt.14, sa.2, 2026 (ESCI, Scopus)
- Yayın Türü: Makale / Tam Makale
- Cilt numarası: 14 Sayı: 2
- Basım Tarihi: 2026
- Doi Numarası: 10.1007/s44227-026-00103-5
- Dergi Adı: International Journal of Networked and Distributed Computing
- Derginin Tarandığı İndeksler: Emerging Sources Citation Index (ESCI), Scopus
- Anahtar Kelimeler: Adaptive learning, Behavioral analytics, Cybersecurity education, Human-centered security, Machine learning, Phishing detection
- İstanbul Gelişim Üniversitesi Adresli: Evet
Özet
Traditional cybersecurity awareness programs often fail to produce sustained behavioral change due to their static and non-personalized design. This paper presents CyberSense AI, a behavior-driven adaptive cybersecurity education framework that integrates a personalized learning engine, an interactive phishing simulation module, and a real-time threat intelligence system powered by a custom-trained machine learning (ML) model based on eXtreme Gradient Boosting (XGBoost). Beyond system implementation, we formally model the adaptive learning mechanism using a knowledge-state representation and reinforcement-inspired update rule to dynamically align question difficulty with user proficiency. To empirically validate the framework, we conducted a controlled pre-test/post-test study involving 60 participants randomly assigned to a control group and an experimental group. Results demonstrate a statistically significant improvement in phishing detection accuracy for the experimental group (, Cohen’s), along with sustained two-week knowledge retention. Behavioral analytics further reveal a monotonic improvement curve across simulation sessions, a strong engagement–performance correlation (), and progressive reduction in false-negative (FN) rates. A feature ablation and deployment latency analysis confirms that the XGBoost subsystem achieves sub-100 ms response time, validating real-time mobile suitability. Collectively, these results establish CyberSense AI as a theoretically grounded and empirically validated framework for scalable, human-centered cybersecurity training.