Publication details

Multimodal Analytics of Cybersecurity Crisis Preparation Exercises: What Predicts Success?

Authors

BORCHERS Conrad ŠVÁBENSKÝ Valdemar KAFLE Sandesh Kumar TANG Kevin K. VYKOPAL Jan

Year of publication 2026
Type Paper in proceedings
Conference 27th International Conference on Artificial Intelligence in Education (AIED 2026)
MU Faculty or unit

Faculty of Informatics

Citation
web
Doi https://doi.org/10.1007/978-3-032-29760-0_47
Keywords Bloom; simulation-based learning; tabletop exercises; prediction
Attached files
Description Instructional alignment, the match between intended cognition and enacted activity, is central to effective instruction but hard to operationalize at scale. We examine alignment in cybersecurity simulations using multimodal traces from 23 teams (76 students) across five exercise sessions. Study 1 codes objectives and team emails with Bloom’s taxonomy and models the completion of key exercise tasks with generalized linear mixed models. Alignment, defined as the discrepancy between required and enacted Bloom levels, predicts success, whereas the Bloom category alone does not predict success once discrepancy is considered. Study 2 compares predictive feature families using grouped cross-validation and L1-regularized logistic regression. Text embeddings and log features outperform Bloom-only models (AUC ~ 0.74 and 0.71 vs. 0.55), and their combination performs best (Test AUC ~ 0.80), with Bloom frequencies adding little. Overall, the work offers a measure of alignment for simulations and shows that multimodal traces best forecast performance, while alignment provides interpretable diagnostic insight.
Related projects:

You are running an old browser version. We recommend updating your browser to its latest version.

More info