{"id":"https://openalex.org/W7131118814","doi":"https://doi.org/10.48550/arxiv.2602.18172","title":"Can AI Lower the Barrier to Cybersecurity? A Human-Centered Mixed-Methods Study of Novice CTF Learning","display_name":"Can AI Lower the Barrier to Cybersecurity? A Human-Centered Mixed-Methods Study of Novice CTF Learning","publication_year":2026,"publication_date":"2026-02-20","ids":{"openalex":"https://openalex.org/W7131118814","doi":"https://doi.org/10.48550/arxiv.2602.18172"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2602.18172","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.18172","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2602.18172","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5119739141","display_name":"Cathrin Schachner","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Schachner, Cathrin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5082964903","display_name":"Jasmin Wachter","orcid":"https://orcid.org/0000-0003-0560-8974"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wachter, Jasmin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.7214000225067139,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.7214000225067139,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.017799999564886093,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10533","display_name":"Teaching and Learning Programming","score":0.016699999570846558,"subfield":{"id":"https://openalex.org/subfields/1706","display_name":"Computer Science Applications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/hacker","display_name":"Hacker","score":0.6377000212669373},{"id":"https://openalex.org/keywords/offensive","display_name":"Offensive","score":0.5823000073432922},{"id":"https://openalex.org/keywords/thematic-analysis","display_name":"Thematic analysis","score":0.5306000113487244},{"id":"https://openalex.org/keywords/barriers-to-entry","display_name":"Barriers to entry","score":0.4203000068664551},{"id":"https://openalex.org/keywords/workload","display_name":"Workload","score":0.36660000681877136},{"id":"https://openalex.org/keywords/experiential-learning","display_name":"Experiential learning","score":0.35929998755455017},{"id":"https://openalex.org/keywords/situation-awareness","display_name":"Situation awareness","score":0.31869998574256897},{"id":"https://openalex.org/keywords/learning-curve","display_name":"Learning curve","score":0.3068000078201294}],"concepts":[{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.6377000212669373},{"id":"https://openalex.org/C176856949","wikidata":"https://www.wikidata.org/wiki/Q2001676","display_name":"Offensive","level":2,"score":0.5823000073432922},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5375000238418579},{"id":"https://openalex.org/C74196892","wikidata":"https://www.wikidata.org/wiki/Q7781188","display_name":"Thematic analysis","level":3,"score":0.5306000113487244},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.43939998745918274},{"id":"https://openalex.org/C55004796","wikidata":"https://www.wikidata.org/wiki/Q1163938","display_name":"Barriers to entry","level":3,"score":0.4203000068664551},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.3804999887943268},{"id":"https://openalex.org/C2778476105","wikidata":"https://www.wikidata.org/wiki/Q628539","display_name":"Workload","level":2,"score":0.36660000681877136},{"id":"https://openalex.org/C37228920","wikidata":"https://www.wikidata.org/wiki/Q1307600","display_name":"Experiential learning","level":2,"score":0.35929998755455017},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3537999987602234},{"id":"https://openalex.org/C145804949","wikidata":"https://www.wikidata.org/wiki/Q478123","display_name":"Situation awareness","level":2,"score":0.31869998574256897},{"id":"https://openalex.org/C34585555","wikidata":"https://www.wikidata.org/wiki/Q1368723","display_name":"Learning curve","level":2,"score":0.3068000078201294},{"id":"https://openalex.org/C80107235","wikidata":"https://www.wikidata.org/wiki/Q7162625","display_name":"Penetration (warfare)","level":2,"score":0.29510000348091125},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.28760001063346863},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2750000059604645},{"id":"https://openalex.org/C100521375","wikidata":"https://www.wikidata.org/wiki/Q2015382","display_name":"Competence (human resources)","level":2,"score":0.2736999988555908},{"id":"https://openalex.org/C2986314682","wikidata":"https://www.wikidata.org/wiki/Q1430192","display_name":"Undergraduate education","level":2,"score":0.2700999975204468},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.26409998536109924},{"id":"https://openalex.org/C121017731","wikidata":"https://www.wikidata.org/wiki/Q11661","display_name":"Information technology","level":2,"score":0.2597000002861023},{"id":"https://openalex.org/C2777211547","wikidata":"https://www.wikidata.org/wiki/Q17141490","display_name":"Training (meteorology)","level":2,"score":0.2581999897956848},{"id":"https://openalex.org/C2781418482","wikidata":"https://www.wikidata.org/wiki/Q5380826","display_name":"Entry Level","level":2,"score":0.25459998846054077},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.2531000077724457},{"id":"https://openalex.org/C2777548347","wikidata":"https://www.wikidata.org/wiki/Q5456937","display_name":"Flagging","level":2,"score":0.25209999084472656}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2602.18172","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.18172","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2602.18172","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.18172","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/4","display_name":"Quality Education","score":0.6571414470672607}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Capture-the-Flag":[0],"(CTF)":[1],"competitions":[2],"serve":[3],"as":[4],"gateways":[5],"into":[6,72],"offensive":[7],"cybersecurity,":[8],"yet":[9],"they":[10],"often":[11],"present":[12,52],"steep":[13],"barriers":[14,34,121],"for":[15,28,177,186],"novices":[16],"due":[17],"to":[18,31,84,168],"complex":[19],"toolchains":[20],"and":[21,37,107,126,143,171,182],"opaque":[22],"workflows.":[23],"Recently,":[24],"agentic":[25,60,116],"AI":[26,61,66,108,117],"frameworks":[27,62],"cybersecurity":[29,91,150,162,180],"promise":[30],"lower":[32],"these":[33],"by":[35,100,122],"automating":[36],"coordinating":[38],"penetration":[39,74],"testing":[40],"tasks.":[41],"However,":[42],"their":[43],"role":[44],"in":[45],"shaping":[46],"novice":[47,70],"learning":[48,105],"remains":[49],"underexplored.":[50],"We":[51,174],"a":[53,89],"human-centered,":[54],"mixed-methods":[55],"case":[56],"study":[57],"examining":[58],"how":[59],"--":[63,68],"here":[64],"Cybersecurity":[65],"(CAI)":[67],"mediates":[69],"entry":[71,120],"CTF-based":[73],"testing.":[75],"An":[76],"undergraduate":[77],"student":[78],"without":[79],"prior":[80],"hacking":[81],"experience":[82],"attempted":[83],"approach":[85],"performance":[86,96],"benchmarks":[87],"from":[88],"national":[90],"challenge":[92],"using":[93],"CAI.":[94],"Quantitative":[95],"metrics":[97],"were":[98],"complemented":[99],"structured":[101],"reflective":[102],"analysis":[103,113],"of":[104,141],"progression":[106],"interaction":[109],"patterns.":[110],"Our":[111],"thematic":[112],"suggest":[114],"that":[115],"reduces":[118],"initial":[119],"providing":[123],"overview,":[124],"structure":[125],"guidance,":[127],"thereby":[128],"lowering":[129],"the":[130,137,158],"cognitive":[131],"workload":[132],"during":[133],"early":[134],"engagement.":[135],"Quantitatively,":[136],"observed":[138],"extensive":[139],"exploration":[140],"strategies":[142],"low":[144],"per-strategy":[145],"execution":[146],"time":[147],"potetially":[148],"facilitatates":[149],"training":[151],"on":[152],"meta,":[153],"i.e.":[154],"strategic":[155],"levels.":[156],"At":[157],"same":[159],"time,":[160],"AI-assisted":[161],"education":[163,181],"introduces":[164],"new":[165],"challenges":[166],"related":[167],"trust,":[169],"dependency,":[170],"responsible":[172],"use.":[173],"discuss":[175],"implications":[176],"human-centered":[178],"AI-supported":[179],"outline":[183],"open":[184],"questions":[185],"future":[187],"research.":[188]},"counts_by_year":[],"updated_date":"2026-08-16T07:02:28.622633","created_date":"2026-02-24T00:00:00"}