REVIEW 3 major objections 6 minor 2 cited by
CyberMentor: AI Powered Learning Tool Platform to Address Diverse Student Needs in Cybersecurity Education
T0 review · 3 major / 6 minor · reviewed 2026-08-10 · deepseek-v4-flash
Pith's one-line read CyberMentor claims an LLM-powered platform with retrieval-augmented knowledge and skill tools can supply the mentorship that non-traditional cybersecurity students lack.
desk verdict A useful open-source tutoring platform whose evaluation is too weak to support the effectiveness claim; the artifact is real but the central claim is not established. read the letter →
The pith
A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.
The reading
What carries the argument
The architecture combines three layers. A knowledge base holds curated cybersecurity documents—course-level knowledge units, certification study material, federal career pathway documents, and a local program catalog—chunked and embedded into a vector database for retrieval-augmented generation. A skill base provides agentic tools that walk students through well-defined tasks: CryptoSolver guides cryptographic problem solving, ScriptCoder builds scripts for network anomaly detection, and MLClassifier leads machine-learning threat-detection exercises. An LLM agent parses natural-language queries, selects the appropriate knowledge source or tool, verifies the generated response, and returns it with sources; the workflow follows a reasoning-and-acting pattern in which the model's reasoning traces are interleaved with tool actions.
What would settle it
Run the same 115 questions through CyberMentor and have three human cybersecurity instructors independently grade helpfulness, correctness, and completeness without seeing the LLM judge's scores; if their averages come in materially below 0.85, 0.83, and 0.90, or if human-LLM agreement on cryptography is near chance, the claimed performance fails to replicate.
Extended reading notes
Core claim
The paper claims that a single platform—CyberMentor—can cover the main pain points of non-traditional cybersecurity students: limited access to updated material, difficulty balancing foundational and advanced knowledge, unclear career alignment, weak math and coding foundations, and lack of timely mentoring. On its own 115-question evaluation spanning knowledge, cryptography, and coding, it reports average helpfulness 0.85, correctness 0.83, and completeness 0.90, with the knowledge category strongest (0.94 helpfulness, 0.91 correctness) and cryptography correctness weakest (0.63); the authors attribute the difference to known LLM limits in precise mathematical reasoning. The paper frames these results as evidence that RAG-grounded, tool-augmented LLM mentoring can support skill development and career preparation while improving equity and sustainability in higher education.
Load-bearing premise
The reported scores rest on the assumption that an automated LLM judge grading answers against reference answers of unstated origin is a valid measure of educational quality; if that judge is biased toward the system's own style, the numbers could be inflated.
Editorial extensions
If this is right
- Non-traditional students would gain round-the-clock, low-cost, multilingual mentoring without needing to align with faculty office hours.
- Faculty can generate course plans aligned with current industry frameworks by querying the knowledge base, reducing manual curation time.
- Students can practice cryptography and coding through structured, step-by-step tool workflows rather than receiving only text answers.
- Institutions and instructors can extend the open-source platform with new documents and custom tools, so the pattern could move to other STEM disciplines.
- If the scores hold, the weakest area is math-heavy cryptography, where correctness falls to 0.63; the authors expect chain-of-thought reasoning and stronger LLMs to close that gap.
Reading between the lines
- The reported evaluation does not compare CyberMentor to a generic LLM chatbot, so it remains possible that the retrieval and tool-selection layers add less than the authors attribute to them; a head-to-head comparison on the same 115 questions would settle this.
- Because the judge is itself an LLM, the scores may reflect stylistic similarity to the system's outputs rather than educational value; human grading of the same responses would be the natural check.
- The cryptography result suggests a hybrid design: let the LLM explain the method but delegate exact arithmetic and modular inverse computation to a symbolic calculator.
- If the transferability claim is right, the same knowledge-base-plus-skill-tools pattern could be applied to other fast-changing fields where curricula lag industry practice, such as AI ethics or cloud engineering, with an equally modular open-source release.
Editorial analysis
A structured set of objections, weighed in public.
Referee Report
Summary. The paper presents CyberMentor, an AI-powered tutoring platform for cybersecurity education that combines a retrieval-augmented generation (RAG) knowledge base with agentic workflow tools for cryptography, scripting, and machine-learning-based threat detection. The authors identify six pain points for non-traditional cybersecurity students, describe the system architecture and three illustrative use cases, and evaluate the platform on 115 questions using a LangChain prompt-based LLM judge with metrics of helpfulness, correctness, and completeness. They report average scores of 0.85, 0.83, and 0.90 respectively and claim the results confirm the system's strong performance in supporting students.
Significance. If the claimed effectiveness were properly established, the platform would address a genuine need for scalable, personalized support for non-traditional cybersecurity students, and its open-source, modular design is a practical strength. The system description, use cases, and initial evaluation demonstrate a functional prototype. However, the current evidence does not support the paper's central effectiveness claim: the evaluation relies entirely on an LLM-as-judge with no human validation, baseline comparison, or statistical analysis, and the paper explicitly defers user pilot studies to future work. The contribution at this stage is a system design and a preliminary internal evaluation, not a validated educational intervention.
major comments (3)
- [Section IX, Table II] The reference answers used for the correctness metric are not described; their provenance (human-authored, LLM-generated, or hybrid) is unknown. Without this information, the correctness scores in Table II are not interpretable, since consistency with an unseen reference is a meaningful measure only if the reference itself is trustworthy and independent of the system's generation process.
- [Section X.C] The paper's own conclusion states that 'Currently, our framework offers fully functional demonstration capabilities' and that 'Pilot studies and feedback from users will be crucial for further development.' This is an explicit acknowledgment that no student users evaluated the system. Yet the abstract claims the results 'underscore the system's ability to support students in developing practical cybersecurity skills while improving equity and sustainability within higher education.' These outcomes (skill development, equity, sustainability) are not operationalized or measured anywhere in the paper. The claims overreach the evidence, and the evaluation does not establish that the platform provides educational value to students.
- [Section IX, Table II, cryptography row] The cryptography category received a correctness score of 0.63, which is notably lower than the other categories and below the level one would expect for a 'strong' or 'robust' educational tool. Use Case 1 prominently features the CryptoSolver tool for a modular inverse problem, making cryptography a core part of the platform's claimed value. The paper acknowledges that LLMs struggle with mathematical reasoning, but then still presents the aggregate scores as confirming strong performance. Given that the system is intended to support students in this domain, the low cryptography score needs a direct discussion of whether the tool meets educational needs for cryptography, not merely a generic note about LLM limitations.
minor comments (6)
- [Section II.A, P2] The phrase 'Imbalance Balancing Foundational and Advanced Knowledge' appears to be a typo; it should likely read 'Imbalance in Balancing Foundational and Advanced Knowledge' or similar.
- [Section II.B] The sentence 'Another significant challenges encountered by students' contains a subject-verb agreement error ('challenges' should be 'challenge').
- [Section IX] The evaluation section does not specify the exact prompt template used for the LangChain evaluator, the specific LLM model used as judge, or the temperature/sampling settings. These details are necessary for reproducibility and for assessing the risk of judge bias.
- [Section IX] The reference answers for the 115-question dataset are not described in the paper; the authors point to a repository, but the paper itself should summarize how these answers were created and validated.
- [Abstract and Section X.C] The term 'sustainability' is used in the abstract without definition or measurement; if the authors intend a specific meaning (e.g., cost-effectiveness, long-term maintainability), it should be stated and operationalized.
- [Section IV.B] The phrase 'a low-cost, 24/7, multilingual, personalized and effective learning support' lists several qualities, but the evaluation does not address multilingual support or cost; these claims should be either evidenced or qualified.
Circularity Check
No circular derivation found; the effectiveness claim rests on an under-validated metric but not on a self-referential chain.
full rationale
CyberMentor is an engineering system, not a derivation, and the paper makes no first-principles prediction that reduces to an input by construction. The knowledge base is built from external sources (NCAE-C, CompTIA, Federal Cyber Career Pathways, program catalogs), and the RAG and agentic workflows are standard components. The evaluation uses three metrics defined in the text: helpfulness, correctness, and completeness. Correctness is defined as consistency with a reference answer, which is the standard meaning of a reference-based metric; the paper does not state that the reference answers were generated by CyberMentor itself. The LangChain prompt-based evaluation uses an LLM judge, and the paper does call it 'independent'; although this is a validation-validity concern because the judge and generator may share biases, no quoted passage demonstrates that the scores are equal to the evaluation inputs by construction. The paper's own Section X.C acknowledges that pilot studies and user feedback are future work and that the framework is a fully functional demonstration, which limits the strength of the effectiveness claim but does not make it circular. The only author self-citation ([29], Wang and Chen) appears in a literature-review list of automated-grading tools and is not load-bearing for any conclusion. Overall, no circular step can be exhibited with the required specificity, so the circularity score is 0.
Assumptions & free parameters
assumptions (4)
- domain assumption The six pain points (P1-P6) are the primary barriers for non-traditional cybersecurity students.
- domain assumption LangChain prompt-based evaluation with an independent LLM is a valid measure of helpfulness, correctness, and completeness.
- domain assumption The reference answers used to score correctness are correct.
- domain assumption RAG over the selected documents supplies up-to-date and complete information.
Cite this review
Pith. "Pith review of CyberMentor: AI Powered Learning Tool Platform to Address Diverse Student Needs in Cybersecurity Education." pith.science (2026). https://pith.science/paper/5REKNPDQ
@misc{pith2026250109709,
author = {Pith},
title = {Pith review of: CyberMentor: AI Powered Learning Tool Platform to Address Diverse Student Needs in Cybersecurity Education},
year = {2026},
howpublished = {\url{https://pith.science/paper/5REKNPDQ}},
note = {Machine review of arXiv:2501.09709}
}
read the original abstract
Many non-traditional students in cybersecurity programs often lack access to advice from peers, family members and professors, which can hinder their educational experiences. Additionally, these students may not fully benefit from various LLM-powered AI assistants due to issues like content relevance, locality of advice, minimum expertise, and timing. This paper addresses these challenges by introducing an application designed to provide comprehensive support by answering questions related to knowledge, skills, and career preparation advice tailored to the needs of these students. We developed a learning tool platform, CyberMentor, to address the diverse needs and pain points of students majoring in cybersecurity. Powered by agentic workflow and Generative Large Language Models (LLMs), the platform leverages Retrieval-Augmented Generation (RAG) for accurate and contextually relevant information retrieval to achieve accessibility and personalization. We demonstrated its value in addressing knowledge requirements for cybersecurity education and for career marketability, in tackling skill requirements for analytical and programming assignments, and in delivering real time on demand learning support. Using three use scenarios, we showcased CyberMentor in facilitating knowledge acquisition and career preparation and providing seamless skill-based guidance and support. We also employed the LangChain prompt-based evaluation methodology to evaluate the platform's impact, confirming its strong performance in helpfulness, correctness, and completeness. These results underscore the system's ability to support students in developing practical cybersecurity skills while improving equity and sustainability within higher education. Furthermore, CyberMentor's open-source design allows for adaptation across other disciplines, fostering educational innovation and broadening its potential impact.
Figures
Figures from the paper (4 more)
Forward citations
Cited by 2 Pith papers
-
Like a Hammer, It Can Build, It Can Break: Large Language Model Uses, Perceptions, and Adoption in Cybersecurity Operations on Reddit
Security practitioners use LLMs independently for low-risk productivity tasks while showing interest in enterprise platforms, but reliability, verification needs, and security risks limit broader autonomy.
-
A Case Study in Gamification for a Cybersecurity Education Program: A Game for Cryptography
A gamified cryptography teaching tool is described as a spy-themed concept game, but no implementation or evaluation is provided.
Reference graph
Works this paper leans on
-
[1]
L. J. Horn and C. D. Carroll, Nontraditional Undergraduates: Trends in Enrollment from 1986 to 1992 and Persistence and Attainment among 1989-90 Beginning Postsecondary Students. Postsecondary Education Descriptive Analysis Reports. Statistical Analysis Report. ERIC, 1996
work page 1986
-
[2]
D. J. Jones and B. C. Watson, High-Risk Students and Higher Education: Future Trends. ASHE-ERIC Higher Education Report No. 3. ERIC, 1990
work page 1990
-
[3]
Yesterday’s non-traditional student is today’s traditional student,
C. for Law and S. P. (CLASP), “Yesterday’s non-traditional student is today’s traditional student,” 2015
work page 2015
-
[4]
P. G. Altbach, P. J. Gumport, and R. O. Berdahl, American higher education in the twenty-first century: Social, political, and economic challenges. Jhu Press, 2011
work page 2011
-
[5]
J. M. Ross Gordon, “Research on adult learners: supporting the needs of a student population that is no longer nontraditional.(research),” Peer review : emerging trends and key debates in undergraduate education. , vol. 13, no. 1, 2011
work page 2011
-
[6]
Which stem majors enroll in online courses, and why should we care? the impact of ethnicity, gender, and non-traditional student characteristics,
C. Wladis, A. C. Hachey, and K. Conway, “Which stem majors enroll in online courses, and why should we care? the impact of ethnicity, gender, and non-traditional student characteristics,” Computers & Education , vol. 87, pp. 285–308, 2015
2015
-
[7]
Barriers for non-traditional students in higher education
N. Beckwith, “Barriers for non-traditional students in higher education.” Educational Research: Theory and Practice , vol. 34, no. 2, pp. 75–79, 2023
work page 2023
-
[8]
P. Singer and A. Friedman, Cybersecurity and Cyberwar: What Everyone Needs to Know . Oxford University Press, 2014
work page 2014
Show all 36 references
-
[9]
Challenges and reflections in designing cyber security curriculum,
H. Santos, T. Pereira, and I. Mendes, “Challenges and reflections in designing cyber security curriculum,” in 2017 IEEE World Engineering Education Conference (EDUNINE) . IEEE, 2017, pp. 47–51
2017
-
[10]
Cybersecurity education, awareness raising, and training initiatives: National level evidence-based results, challenges, and promise,
R. Shillair, P. Esteve-Gonz ´alez, W. H. Dutton, S. Creese, E. Nagyfejeo, and B. von Solms, “Cybersecurity education, awareness raising, and training initiatives: National level evidence-based results, challenges, and promise,” Computers & Security , vol. 119, p. 102756, 2022
2022
-
[11]
Addressing cybersecurity challenges in education,
W. J. Triplett, “Addressing cybersecurity challenges in education,” International Journal of STEM Education for Sustainability , vol. 3, no. 1, pp. 47–67, 2023
2023
-
[12]
Design of secure coding challenges for cybersecurity education in the industry,
T. Gasiba, U. Lechner, M. Pinto-Albuquerque, and A. Zouitni, “Design of secure coding challenges for cybersecurity education in the industry,” in International Conference on the Quality of Information and Commu- nications Technology. Springer, 2020, pp. 223–237
2020
-
[13]
Cyberse- curity education: The skills gap, hurdle!
S. N. John, E. Noma-Osaghae, F. Oajide, and K. Okokpujie, “Cyberse- curity education: The skills gap, hurdle!” Innovations in Cybersecurity Education, pp. 361–376, 2020
2020
-
[14]
The role of national cybersecurity strategies on the improvement of cybersecurity education,
S. AlDaajeh, H. Saleous, S. Alrabaee, E. Barka, F. Breitinger, and K.-K. R. Choo, “The role of national cybersecurity strategies on the improvement of cybersecurity education,” Computers & Security , vol. 119, p. 102754, 2022
2022
-
[15]
Paar and J
C. Paar and J. Pelzl, Understanding Cryptography: A Textbook for Students and Practitioners . Springer, 2010. JOURNAL OF LATEX CLASS FILES, VOL. XX, NO. XX, XXXX 11
2010
-
[16]
The importance of cybersecurity education in school,
N. A. A. Rahman, I. H. Sairi, N. A. M. Zizi, and F. Khalid, “The importance of cybersecurity education in school,” International Journal of Information and Education Technology , vol. 10, no. 5, pp. 378–382, 2020
2020
-
[17]
Analyzing students’ self-perception of success and learning effective- ness using gamification in an online cybersecurity course,
S. Ros, S. Gonzalez, A. Robles, L. Tobarra, A. Caminero, and J. Cano, “Analyzing students’ self-perception of success and learning effective- ness using gamification in an online cybersecurity course,” IEEE Access, vol. 8, pp. 97 718–97 728, 2020
2020
-
[18]
Changing the landscape of cybersecurity education in the eu: Will the new approach produce the required cybersecurity skills?
B. J. Bla ˇziˇc, “Changing the landscape of cybersecurity education in the eu: Will the new approach produce the required cybersecurity skills?” Education and information technologies , vol. 27, no. 3, pp. 3011–3036, 2022
2022
-
[19]
Emulating and evaluating virtual remote laboratories for cybersecurity,
A. Robles-G ´omez, L. Tobarra, R. Pastor-Vargas, R. Hern ´andez, and J. Cano, “Emulating and evaluating virtual remote laboratories for cybersecurity,” Sensors, vol. 20, no. 11, p. 3011, 2020
2020
-
[20]
A study of cybersecurity education using a present-test-practice-assess model,
M. D. Workman, J. A. Lu ´evanos, and B. Mai, “A study of cybersecurity education using a present-test-practice-assess model,”IEEE Transactions on Education, vol. 65, no. 1, pp. 40–45, 2021
2021
-
[21]
Scalable learning environments for teaching cybersecurity hands-on,
J. Vykopal, P. ˇCeleda, P. Seda, V .ˇSv´abensk`y, and D. Tovarˇn´ak, “Scalable learning environments for teaching cybersecurity hands-on,” in 2021 IEEE Frontiers in Education Conference (FIE) . IEEE, 2021, pp. 1–9
2021
-
[22]
Cyber security threat analysis in higher education institutions as a result of distance learning,
L. A. Alexei and A. Alexei, “Cyber security threat analysis in higher education institutions as a result of distance learning,” International Journal of Scientific and Technology Research, no. 3, pp. 128–133, 2021
2021
-
[23]
Education cybersecurity: Learning man- agement system, data and tools,
M. Krumova and A. Kataria, “Education cybersecurity: Learning man- agement system, data and tools,” inProceedings of the 16th International Conference on Theory and Practice of Electronic Governance, 2023, pp. 318–323
2023
-
[24]
Ai in cybersecurity education-a systematic literature review of studies on cybersecurity moocs,
S. Laato, A. Farooq, H. Tenhunen, T. Pitkamaki, A. Hakkala, and A. Airola, “Ai in cybersecurity education-a systematic literature review of studies on cybersecurity moocs,” in 2020 IEEE 20th International Conference on Advanced Learning Technologies (ICALT). IEEE, 2020, pp. 6–10
2020
-
[25]
Empowering professionals: a generative ai approach to personalized cybersecurity learning,
C. Kallonas, A. Piki, and E. Stavrou, “Empowering professionals: a generative ai approach to personalized cybersecurity learning,” in 2024 IEEE Global Engineering Education Conference (EDUCON) . IEEE, 2024, pp. 1–10
2024
-
[26]
Large language models for education: A survey,
H. Xu, W. Gan, Z. Qi, J. Wu, and P. S. Yu, “Large language models for education: A survey,” arXiv preprint arXiv:2405.13001 , 2024
2024 arXiv
-
[27]
Retrieval- augmented generation for knowledge-intensive nlp tasks,
P. Lewis, E. Perez, A. Piktus, F. Petroni, V . Karpukhin, N. Goyal, H. K ¨uttler, M. Lewis, W.-t. Yih, T. Rockt ¨aschel et al. , “Retrieval- augmented generation for knowledge-intensive nlp tasks,” Advances in Neural Information Processing Systems , vol. 33, pp. 9459–9474, 2020
2020
-
[28]
Chain of thought empowers transformers to solve inherently serial problems,
Z. Li, H. Liu, D. Zhou, and T. Ma, “Chain of thought empowers transformers to solve inherently serial problems,” 2024. [Online]. Available: https://arxiv.org/abs/2402.12875
2024 arXiv
-
[29]
Analyzing code text strings for code evaluation,
T. Wang and Z. Chen, “Analyzing code text strings for code evaluation,” in 2023 IEEE International Conference on Big Data (BigData) , 2023, pp. 5619–5628
2023
-
[30]
Morse: Bridging the gap in cybersecurity expertise with retrieval augmented generation,
M. Simoni, A. Saracino, M. Conti et al. , “Morse: Bridging the gap in cybersecurity expertise with retrieval augmented generation,” arXiv preprint arXiv:2407.15748, 2024
2024 arXiv
-
[31]
Hugginggpt: Solving ai tasks with chatgpt and its friends in hugging face,
Y . Shen, K. Song, X. Tan, D. Li, W. Lu, and Y . Zhuang, “Hugginggpt: Solving ai tasks with chatgpt and its friends in hugging face,” Advances in Neural Information Processing Systems , vol. 36, 2024
2024
-
[32]
What are tools anyway? a survey from the language model perspective,
Z. Wang, Z. Cheng, H. Zhu, D. Fried, and G. Neubig, “What are tools anyway? a survey from the language model perspective,” arXiv preprint arXiv:2403.15452, 2024
2024 arXiv
-
[33]
Scaling llm test-time compute optimally can be more effective than scaling model parameters,
C. Snell, J. Lee, K. Xu, and A. Kumar, “Scaling llm test-time compute optimally can be more effective than scaling model parameters,” arXiv preprint arXiv:2408.03314, 2024
2024 arXiv
-
[34]
The mystery of job performance: a system dynamics model of human behavior,
J. Block and S. Pickl, “The mystery of job performance: a system dynamics model of human behavior,” in of the 32nd international conference of the System Dynamics Society, Delft, Netherlands , 2014, pp. 20–24
2014
-
[35]
React: Synergizing reasoning and acting in language models,
S. Yao, J. Zhao, D. Yu, N. Du, I. Shafran, K. Narasimhan, and Y . Cao, “React: Synergizing reasoning and acting in language models,” 2023. [Online]. Available: https://arxiv.org/abs/2210.03629
2023 arXiv
-
[36]
J. M. Stewart, CompTIA Security+ Review Guide: Exam SY0-601. John Wiley & Sons, 2021
2021
Reviewed August 10, 2026 · model on record in the stance chip above.
Discussion (0). Continue with ORCID to comment.