A MODEL FOR FORMATION COGNITIVE SKILLS FOR CYBERSECURITY SPECIALISTS
DOI:
https://doi.org/10.28925/2663-4023.2025.30.973Keywords:
information security; cybersecurity; cognitive skills; information security; model of forming cognitive skills.Abstract
This article is devoted to the development and theoretical substantiation of a methodology for the formation of cognitive skills in information and cyber security specialists, the implementation of which will allow improving the professional training of specialists and will contribute to increasing motivation in the educational process. The relevance of the problem of training highly qualified cybersecurity specialists is due to the rapid growth of cyber threats, which requires not only technical knowledge of a person, but also developed cognitive skills (critical thinking, the ability to make quick decisions, pattern recognition and stress resistance). By analyzing psychological and methodological literature, the essence and structure of the concept of "cognitive skills", which are critical for information and cybersecurity specialists, are detailed. Based on the problem-activity and personality-oriented approaches, a model of the formation of cognitive skills of cybersecurity specialists has been developed, the main stages of which are diagnostic, formative and control-corrective. Based on the principles of systematicity and professional orientation, a formative block has been defined, which contains a content and activity component. The content part of the methodology covers the scientific and methodological support of disciplines of the specialty F5, software for educational activities and specialized tests in psychology. The activity part of the model is provided by trainings, simulation exercises such as imitation of cyberattacks in the cyber polygon environment, game methods (attacker - security specialists) and cognitive simulators aimed at developing attention, memory, speed of information processing. Pedagogical conditions for the effective implementation of this methodology are outlined, in particular, the readiness and qualification of teachers and technical support. The results of the study can be used by higher education institutions and training centers to modernize curricula and improve the quality of training specialists in the field of information security.
Downloads
References
Maalem Lahcen, R. A., Caulkins, B., Mohapatra, R., et al. (2020). Review and insight on the behavioral aspects of cybersecurity. Cybersecurity, 3(10). https://doi.org/10.1186/s42400-020-00050-w
Bone, J. (2024). Cognition in cybersecurity situational awareness. https://doi.org/10.13140/RG.2.2.23490.59842
Eden, S., & Kasowaki, L. (2023). The human element in cybersecurity: Understanding and mitigating risks. EasyChair Preprint, 11642.
Andrade, R. O., & Yoo, S. G. (2019). Cognitive security: A comprehensive study of cognitive science in cybersecurity. Journal of Information Security and Applications, 48. https://doi.org/10.1016/j.jisa.2019.06.008
Jiang, Y., & Atif, Y. (2021). A selective ensemble model for cognitive cybersecurity analysis. Journal of Network and Computer Applications, 193, 103210. https://doi.org/10.1016/j.jnca.2021.103210
Jøsok, Ø., Lugo, R., Knox, B. J., Sütterlin, S., & Helkala, K. (2019). Self-regulation and cognitive agility in cyber operations. Frontiers in Psychology, 10, 875. https://doi.org/10.3389/fpsyg.2019.00875
Burguin, Y., Rauffet, P., Espes, D., Chauvin, C., & Le Parc, P. (2022). RESCAPE Project: Tool for cyberdefense adaptive training based on the classification of operator cognitive state. 13th AHFE Conference (Applied Human Factors and Ergonomics), New York, United States.
Musazade, N., Mezei, J., & Wang, X. (2025). Exploring the impact of AI tools on cognitive skills: A comparative analysis. Algorithms, 18(10), 631. https://doi.org/10.3390/a18100631
Cole, K. A., Francis, A. L., Rogers, M. K., & Balazs, J. (2025). Can individual differences in cognitive capacity predict cybersecurity performance? Computers & Security, 155, 104497. https://doi.org/10.1016/j.cose.2025.104497
Lugo, R. G., Firth-Clark, A., Knox, B. J., Jøsok, Ø., Helkala, K., & Sütterlin, S. (2019). Cognitive profiles and education of female cyber defence operators. In D. Schmorrow & C. Fidopiastis (Eds.), Augmented cognition. HCII 2019. Lecture Notes in Computer Science (Vol. 11580). Springer. https://doi.org/10.1007/978-3-030-22419-6_40
Ullah, F., Ye, X., Fatima, U., Akhtar, Z., Wu, Y., & Ahmad, H. (2025). What skills do cyber security professionals need? https://doi.org/10.48550/arXiv.2502.13658
Campbell, S. G., Saner, L. D., & Bunting, M. F. (2016). Characterizing cybersecurity jobs: Applying the cyber aptitude and talent assessment framework. In Proceedings of the Symposium and Bootcamp on the Science of Security (HotSos '16) (pp. 25–27). ACM. https://doi.org/10.1145/2898375.2898394
Khadka, K., & Ullah, A. B. (2025). Human factors in cybersecurity: An interdisciplinary review and framework proposal. International Journal of Information Security, 24, 119. https://doi.org/10.1007/s10207-025-01032-0
Maksymenko, S., Derkach, L., Kirichevska, E., & Kasynets, M. (2022). Psychology of cognitive processes: A scientific manual. Kyiv: Lyudmila Publishing House.
Maksymenko, S. D., Irkhin, Yu. B., Derkach, L. M., Marusynets, M. M., & Kasynets, M. M. (2023). Psychological organization of modular formation of cognitive abilities: Genetic-creative approach (Vol. 2). Kyiv: Lyudmila Publishing House.
Shapar, V. B. (2007). Modern explanatory psychological dictionary. Kharkiv: Prapor. ISBN 966-7880-85-0.
Mukan, N., Chubinska, N., & Stasyshyn, R. (2023). The role and significance of cognitive and metacognitive skills in the professional activity of a lawyer. Academic Visions, (22). https://academy-vision.org/index.php/av/article/view/477
Nosenko, E. L. (2003). Emotional intelligence: Conceptualization of the phenomenon, basic functions. Kyiv: Higher School.
Tang, K. S. (2020). The use of epistemic tools to facilitate epistemic cognition and metacognition in developing scientific explanation. Cognition and Instruction, 38(4), 474–502.
Hanushek, E. A., et al. (2025). Age and cognitive skills: Use it or lose it. Science Advances, 11, eads1560. https://doi.org/10.1126/sciadv.ads1560
Shevchenko, S., Zhdanova, Y., Shevchenko, H., Nehodenko, O., & Spasiteleva, S. (2023). Information security risk management using cognitive modeling. Cybersecurity Providing in Information and Telecommunication Systems, 3550, 297–305. https://ceur-ws.org/Vol-3550/short15.pdf
Shevchenko, S., Zhdanova, Y., Kryvytska, O., Shevchenko, H., & Spasiteleva, S. (2024). Fuzzy cognitive mapping as a scenario approach for information security risk analysis. Cybersecurity Providing in Information and Telecommunication Systems II, 3826, 356–362. https://ceur-ws.org/Vol-3826/short28.pdf
Shevchenko, S., Zhdanova, Y., Skladannyi, P., & Petrenko, T. (2024). Fuzzy cognitive maps as a tool for visualizing incident response scenarios in security systems. Cybersecurity: Education, Science, Technique, 2(26), 417–429. https://doi.org/10.28925/2663-4023.2024.26.707
Vdovichenko, O. (2020). Conceptual foundations of personality risk: A cyclical structural-process model. Bulletin of the KhNPU named after G.S. Skovoroda. Psychology, 18–36.
McIntire, L. K., et al. (2013). Detection of vigilance performance using eye blinks. Applied Ergonomics. https://doi.org/10.1016/j.apergo.2013.04.020
Diamond, A. (2013). Executive functions. Annual Review of Psychology, 64, 135–168. https://doi.org/10.1146/annurev-psych-113011-143750
Njoga, D. A. O., Liyala, S., & Abeka, S. (2022). Influence of cognitive agility of cyber operators on situationally aware cyberspace protection. International Journal of Innovative Research and Advanced Studies (IJIRAS), 9.
Shevchenko, S. M. (2007). Pedagogical conditions for the formation of analytical thinking of students of higher technical educational institutions. Pedagogy, Psychology and Medical-Biological Problems of Physical Education and Sports, (3), 151–154.
Shevchenko, S. M. (2013). Development of analytical thinking of students of higher technical educational institutions in the process of studying mathematical disciplines (Doctoral dissertation). National Pedagogical University named after M. P. Drahomanov, Kyiv.
Buriachok, V. L., Shevchenko, S. M., & Skladannyi, P. M. (2018). Virtual laboratory for process modeling in information and cybersecurity as a means of forming students' practical skills. Cybersecurity: Education, Science, Technique, 2(2), 98–104. https://doi.org/10.28925/2663-4023.2018.2.98104
Zhdanova, Y., Spasiteleva, S., & Shevchenko, S. (2019). Application of the Security.Cryptography class library for practical training of cybersecurity specialists. Cybersecurity: Education, Science, Technique, 4(4), 44–53. https://doi.org/10.28925/2663-4023.2019.4.4453
Zhdanova, Y., Spasiteleva, S., & Shevchenko, S. (2019). Formation of IT students’ competencies in information protection using cryptographic services .NET Framework. Physics and Mathematics Education, 1(19), 48–54.
Zhdanova, Y., Spasiteleva, S., Shevchenko, S., & Kravchuk, K. (2020). Applied and methodical aspects of using hash functions for information security. Cybersecurity: Education, Science, Technique, 4(8), 85–96. https://doi.org/10.28925/2663-4023.2020.8.8596
Shevchenko, S., Zhdanova, Y., Spasiteleva, S., & Skladannyi, P. (2020). Conducting a SWOT-analysis of information risk assessment as a means of forming practical skills of Students Specialty 125 Cyber Security. Cybersecurity: Education, Science, Technique, 2(10), 158–168. https://doi.org/10.28925/2663-4023.2020.10.158168
Buriachok, V., Korshun, N., Shevchenko, S., & Skladannyi, P. (2020). Application of NI Multisim environment in the practical skills building for students of 125 “Cybersecurity” specialty. Cybersecurity: Education, Science, Technique, 9(1), 159–196. https://doi.org/10.28925/2663-4023.2020.9.159169
Buriachok, V., Shevchenko, S., Zhdanova, Y., & Skladannyi, P. (2021). Interdisciplinary approach to the development of information security risk management skills on the basis of decision-making theory. Cybersecurity: Education, Science, Technique, 3(11), 155–165. https://doi.org/10.28925/2663-4023.2021.11.155165
Shevchenko, S., Zhdanova, Y., & Kravchuk, K. (2021). Information protection model based on information security risk assessment for small and medium-sized businesses. Cybersecurity: Education, Science, Technique, 2(14), 158–175. https://doi.org/10.28925/2663-4023.2021.14.158175
Published
How to Cite
Issue
Section
License
Copyright (c) 2025 Світлана Шевченко , Юлія Жданова, Світлана Спасітєлєва
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
