EthicsTransparencyAccountabilitycs.CR
CAI Fluency: A Framework for Cybersecurity AI Fluency
Víctor Mayoral-Vilches, Jasmin Wachter, Cristóbal R. J. Veas Chavez, Cathrin Schachner, Luis Javier Navarrete-Lozano, María Sanz-Gómez
August 19, 2025
arXiv.org
7 citations
Key Takeaways
-
AI literacy in cybersecurity requires more than technical skills: The CAI Fluency framework emphasizes that practitioners need to develop critical thinking and ethical awareness alongside technical competencies to use AI-based security tools responsibly, not just learn how to operate them.
-
The framework adapts existing AI fluency principles for security contexts: By building on the Framework for AI Fluency and customizing its three modalities of human-AI interaction and four core competencies specifically for cybersecurity, the approach recognizes that different domains require tailored education in responsible AI use.
-
Democratizing AI knowledge is essential for global security: The platform aims to accelerate widespread adoption of AI-based cybersecurity solutions across the global security community, suggesting that responsible AI implementation depends on making this knowledge accessible beyond elite technical experts.
-
Educational frameworks should bridge theory and practice: The white paper functions as both a theoretical guide and practical resource, indicating that responsible AI adoption requires helping users understand underlying principles while also providing concrete guidance for real-world security applications.
Abstract
This work introduces CAI Fluency, an an educational platform of the Cybersecurity AI (CAI) framework dedicated to democratizing the knowledge and application of cybersecurity AI tools in the global security community. The main objective of the CAI framework is to accelerate the widespread adoption and effective use of artificial intelligence-based cybersecurity solutions, pathing the way to vibe-hacking, the cybersecurity analogon to vibe-coding. CAI Fluency builds upon the Framework for AI Fluency, adapting its three modalities of human-AI interaction and four core competencies specifically for cybersecurity applications. This theoretical foundation ensures that practitioners develop not just technical skills, but also the critical thinking and ethical awareness necessary for responsible AI use in security contexts. This technical report serves as a white-paper, as well as detailed educational and practical guide that helps users understand the principles behind the CAI framework, and educates them how to apply this knowledge in their projects and real-world security contexts.