Scholarlink

The escalating complexity of cyber threats in India necessitates cybersecurity education that cultivates advanced analytical competencies, particularly Root Cause Analysis (RCA). Existing platforms such as CISA, CyberGyan, and TryHackMe emphasize awareness or offensive training, but lack structured pedagogical designs aligned with academic curricula to foster RCA and causal reasoning skills. In this paper, we present CyberNiriksha, a log-based learning environment developed for undergraduate computing students to build RCA skills through authentic, scenario-driven log analysis. The system integrates a Streamlit-based web interface with Splunk Enterprise and is structured into four scaffolded phases: (1) event classification, (2) Splunk-based querying, (3) attack pattern recognition, and (4) causal reasoning via attack tree construction. Grounded in Constructivist Learning principles and Cognitive Load Theory, the system incorporates roleplay tasks, Capture-The-Flag style challenges, instructional videos, and adaptive feedback to balance engagement and cognitive complexity. Validation involved two phases: subject matter experts (SMEs, N = 3) evaluated content clarity, interface usability, and assessment logic, while a pilot usability study with undergraduate students (N = 5) assessed learning effectiveness and user experience. Students reported that CyberNiriksha enhanced engagement and improved understanding of RCA. Feedback highlighted areas for refinement, including video pacing, session continuity, and onboarding support. CyberNiriksha demonstrates a pedagogically grounded approach to teaching RCA using industry-standard tools, addressing gaps in India’s cybersecurity education ecosystem. By scaffolding log-based inquiry and causal reasoning, CyberNiriksha offers a scalable model for integrating practical cybersecurity analysis into higher education.

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

CyberNiriksha: Bridging Root Cause Analysis Gaps in Indian Cybersecurity Education Through a Progressive Log-Based Learning Environment

  • 会议论文

  • 发表日期：

    2026年

查看全文
  • Priya V. Nagvekar,
  • Kingshuk Mitra,
  • Syaamantak Das,
  • Sridhar Iyer

摘要

The escalating complexity of cyber threats in India necessitates cybersecurity education that cultivates advanced analytical competencies, particularly Root Cause Analysis (RCA). Existing platforms such as CISA, CyberGyan, and TryHackMe emphasize awareness or offensive training, but lack structured pedagogical designs aligned with academic curricula to foster RCA and causal reasoning skills. In this paper, we present CyberNiriksha, a log-based learning environment developed for undergraduate computing students to build RCA skills through authentic, scenario-driven log analysis. The system integrates a Streamlit-based web interface with Splunk Enterprise and is structured into four scaffolded phases: (1) event classification, (2) Splunk-based querying, (3) attack pattern recognition, and (4) causal reasoning via attack tree construction. Grounded in Constructivist Learning principles and Cognitive Load Theory, the system incorporates roleplay tasks, Capture-The-Flag style challenges, instructional videos, and adaptive feedback to balance engagement and cognitive complexity. Validation involved two phases: subject matter experts (SMEs, N = 3) evaluated content clarity, interface usability, and assessment logic, while a pilot usability study with undergraduate students (N = 5) assessed learning effectiveness and user experience. Students reported that CyberNiriksha enhanced engagement and improved understanding of RCA. Feedback highlighted areas for refinement, including video pacing, session continuity, and onboarding support. CyberNiriksha demonstrates a pedagogically grounded approach to teaching RCA using industry-standard tools, addressing gaps in India’s cybersecurity education ecosystem. By scaffolding log-based inquiry and causal reasoning, CyberNiriksha offers a scalable model for integrating practical cybersecurity analysis into higher education.