ResearchPod Summary
Tabletop exercises (TTXs) are increasingly used in cybersecurity education to simulate crisis responses in a safe, collaborative environment. While these exercises are effective for building practical skills, they present a significant assessment challenge: the open-ended nature of the tasks makes manual evaluation time-consuming and prone to delays. Instructors often struggle to provide timely, meaningful feedback, which is critical for student learning. This study explores how learning analytics and artificial intelligence can automate this process, allowing for faster, more consistent feedback without requiring constant instructor intervention.
To address the gap in automated TTX assessment, the researchers analyzed data from 81 participants across 24 teams in two distinct cybersecurity exercises. The study utilized two primary automated approaches:
The study was conducted using the open-source INJECT platform, which logs all team activities, tool interactions, and communications, providing a rich dataset for analysis.
The results indicate that both methods are viable for real-world classroom application. Clustering proved to be a reliable, low-computation method for identifying team performance profiles, which can significantly reduce the time instructors spend on initial assessment. Regarding LLMs, the study highlights that while earlier models often struggled to match instructor judgment, newer iterations like GPT-5.2 show promising accuracy in applying standardized rubrics to complex, open-ended student responses. These tools have been integrated into the INJECT platform to support educators in scaling their teaching practices.
AI-generated third-party summary by ResearchPod. Not official content or an endorsement by the paper authors or affiliated organizations.