The rapid expansion of digital infrastructure has intensified cybersecurity threats, making individuals and organizations increasingly vulnerable to phishing, malware, social engineering, and data breaches. Despite advances in technical defenses, human factors remain a critical vulnerability, as a large proportion of successful attacks exploit limited user awareness.
This paper proposes CyberIQ, an Artificial Intelligence-based Cybersecurity Awareness System designed to detect threats, personalize user education, and dynamically adapt training content based on individual behavior and risk profiles. CyberIQ integrates Artificial Intelligence techniques such as Natural Language Processing (NLP) and rule-based reasoning to deliver real-time cybersecurity awareness, phishing detection guidance, and interactive learning modules.The system is modeled on an adaptive training framework that assesses user knowledge gaps and updates content intelligently. CyberIQ addresses the critical gap between technical cybersecurity tools and human-centered education by providing a scalable, intelligent, and proactive awareness platform.
Introduction
The text emphasizes that in today’s digital world, cybersecurity is critical due to the increasing number of cyber threats such as phishing, ransomware, and data breaches. Despite advanced technical defenses, human error remains the primary cause of most security breaches, largely due to low user awareness and ineffective traditional training methods.
Existing cybersecurity awareness programs are often generic and fail to address individual user needs, making them ineffective in changing long-term behavior. To overcome these limitations, the proposed system, CyberIQ, is an AI-driven cybersecurity awareness platform that uses machine learning, natural language processing, and behavioral analytics to deliver personalized and adaptive training.
CyberIQ works by profiling users, assessing their risk levels, detecting threats through intelligent analysis of emails, URLs, and behavior, and providing customized training through simulations, microlearning, and gamification. It also includes dashboards for tracking performance and organizational security trends.
The results show that CyberIQ significantly improves cybersecurity awareness, reducing phishing susceptibility, enhancing threat detection accuracy, improving response times, and increasing user knowledge. Overall, the system demonstrates that adaptive, AI-based training is far more effective than traditional methods in building strong cybersecurity awareness and resilience.
Conclusion
This paper presented CyberIQ, a cybersecurity awareness system designed to address the human dimension of cybersecurity through adaptive and personalized training. By leveraging a rule-based intelligence engine, NLP-based threat detection, and interactive simulations, CyberIQ provides a practical and engaging approach to improving users’ cybersecurity knowledge and behavior.
Unlike traditional static training programs, CyberIQ adapts content based on each user’s risk profile, prior knowledge, and interaction patterns, ensuring that training is targeted and effective. Simulation results
demonstrate significant improvements: a 73% reduction in phishing susceptibility, a 53% improvement in incident response time, a 62% increase in security knowledge scores, and an 80% improvement in threat detection accuracy. These outcomes reinforce findings from previous studies, highlighting the value of interactive and adaptive cybersecurity education.
The framework emphasizes user engagement, transparency, and practical learning, addressing key human factors that remain critical vulnerabilities in organizational cybersecurity.
Future work includes deploying CyberIQ in real organizational environments to validate simulation results, exploring enhanced content personalization techniques, and conducting longitudinal studies to measure the durability of awareness improvements over time. CyberIQ demonstrates a step forward in developing resilient cybersecurity practices by combining technology-assisted training with active user participation.
References
[1] Akter, S., Uddin, M. R., Sajib, S., Lee, W. J. T., Michael, K., & Hossain, M. A. (2022). Reconceptualizing cybersecurity awareness capability in the data-driven digital economy. Annals of Operations Research, 350, 673–698. https://doi.org/10.1007/s10479-022-04844-8
[2] Alnaffar, A. (2024). Cybersecurity Resilience Awareness in the Era of AI. International Journal of Science and Research (IJSR), 13(3), 244–245.
[3] Alshehri, A. (2024). AI-Powered Adaptive Cybersecurity Awareness Training for the Industrial Sector. International Journal of Intelligent Systems and Applications in Engineering, 12(4), 5493–5505.
[4] Dandge, P. S., Dawre, U. I., & Shirshikar, R. F. (2023). Artificial Intelligence in Cyber Security. Journal of Advanced Zoology, 44(S-8), 69–72.
[5] Gasiba, T. E., Lechner, U., & Pinto-Albuquerque, M. (2020). Sifu — A Cybersecurity Awareness Platform with Challenge Assessment and Intelligent Coach. Cybersecurity, 3(1), 1–23.
[6] Kaur, R., Gabrijelcic, D., & Klobucar, T. (2023). Artificial intelligence for cybersecurity: Literature review and future research directions. Information Fusion, 97, 101804. https://doi.org/10.1016/j.inffus.2023.101804
[7] National Institute of Standards and Technology (NIST). (2018). Framework for Improving Critical Infrastructure Cybersecurity (Version 1.1). NIST.
[8] Shahbazi, Z., Jalali, R., & Molaeevand, M. (2025). AI-Based Phishing Detection and Student Cybersecurity Awareness in the Digital Age. Big Data and Cognitive Computing, 9(210). https://doi.org/10.3390/bdcc9080210
[9] Tan, Z., Beuran, R., Hasegawa, S., Jiang, W., Zhao, M., & Tan, Y. (2020). Adaptive Security Awareness Training Using Linked Open Data Datasets. Education and Information Technologies, 25(6), 5235–5259.
[10] Verizon. (2023). Data Breach Investigations Report. Verizon Business.