Abstract:

In recent years, the demand for practical, real-world cybersecurity education has grown dramatically. Traditional lecture-based methods often fall short in equipping students with the applied skills needed to detect, analyze, and respond to current cyber threats. As cyber-physical systems (CPS) play a critical role in modern infrastructure, cybersecurity education must evolve to prepare students for emerging threats that bridge the digital and physical domains. CPS combine software, hardware, and networked communication, reflecting real-world security challenges that demand hands-on learning. This paper proposes a project-based educational framework that integrates CPS into cybersecurity instruction to strengthen students’ technical and analytical skills.

Through our review of cybersecurity education models and project-based learning approaches, we identified several guiding questions that remain insufficiently addressed: How can open-source security platforms be effectively integrated into semester-long, project-based cybersecurity courses? What technical and analytical competency frameworks can be developed through CPS-based learning activities? And how can scenario-driven cybersecurity tasks enhance students’ problem-solving, critical thinking, and real-world technical skills?

The proposed framework introduces modular laboratory exercises and CPS simulations that allow students to explore vulnerabilities such as signal interference, network manipulation, and unauthorized access. In this project, Unmanned Aerial Vehicles (UAVs) serve as the primary CPS testbed, enabling learners to analyze real-time communication and control systems. Students use open-source monitoring tools to detect anomalies, design response strategies, and practice incident reporting consistent with professional standards. The assessment methodology is organized around four key dimensions: contextual alignment with workforce standards (NICE and ACE), realistic task design requiring higher-order cognitive skills, transparent evaluation criteria through detailed rubrics, and iterative feedback for continuous skill refinement.

Preliminary results indicate that the greatest gains were observed in students’ understanding of CPS features, monitoring of communication channels, and detection of simulated threats, where median confidence scores increased from approximately 2.5 (low–moderate confidence) to around 4.0 (high confidence). Students also reported substantial improvements in conceptual knowledge and in applying cybersecurity principles to real-world scenarios, highlighting the effectiveness of scenario-driven learning. Gains in critical thinking were more modest, with median scores rising from 3.2 to 3.6, reflecting gradual reinforcement over multiple courses.

Our findings indicate that integrating project-based UAV activities into coursework effectively develops both practical technical skills and analytical thinking, aligns with national workforce competency standards, and provides a model that other courses can adopt to integrate security tools into the classroom.

Keywords:

Cybersecurity Education, Case Studies, Cyber physical systems, Experiential Learning, Educational Framework.