Collaborative research: promoting undergraduate discovery in cybersecurity for multi-cloud machine learning operations

The National Science Foundation Division of Undergraduate Education awarded Rochester Institute of Technology $223,234 on October 15, 2026, under the STEM Education program (CFDA 47.076) to develop and pilot five portable, hands-on instructional modules that integrate multi-cloud computing, machine learning operations, and cybersecurity through inquiry-based learning.

Project NIMBUS will create a practice-oriented security sandbox available in both free, open-source and commercial cloud versions, designed to lower adoption barriers for community colleges, minority-serving institutions, and universities with varying levels of technical infrastructure. Students will investigate broken-by-design machine learning pipelines and perform structured threat analysis, guided by situated learning and the 5E instructional model (engage, explore, explain, elaborate, and evaluate). The project addresses the national need for undergraduate education that treats cloud computing, machine learning, and cybersecurity as integrated subjects rather than separate domains, building practical reasoning about how security failures emerge when data, models, software, identities, and cloud services interact.

Development, piloting, and study activities occur at Rochester Institute of Technology and the University of Alabama. The period of performance runs through September 30, 2029, with place of performance in Rochester, New York.

Abstract

This project aims to serve the national interest by improving how undergraduate students learn to secure machine learning systems that operate across multiple cloud providers. These systems increasingly support critical infrastructure, public services, business operations, and scientific discovery, yet undergraduate education often teaches cloud computing, machine learning, and cybersecurity as separate subjects. As a result, students may not develop the integrated reasoning needed to understand how security failures can emerge when data, models, software, identities, and cloud services interact. The significance of this level 1 engaged student learning project is that IT intends to help students build a practical, transferable understanding of cybersecurity in modern artificial intelligence systems. Project nimbus plans to develop and disseminate five portable, hands-on instructional modules supported by a practice-oriented security sandbox. The sandbox will include both a free, open-source version and a commercial cloud version, lowering adoption barriers for community colleges, minority-serving institutions, and universities with different levels of technical infrastructure. By expanding access to realistic learning experiences, the project intends to strengthen the national workforce prepared to secure artificial intelligence and machine learning systems. Project nimbus goals and scope center on developing, piloting, and studying five self-contained modules that integrate multi-cloud computing, machine learning operations, and cybersecurity through inquiry-based learning at the rochester institute of technology and the university of alabama. Guided by situated learning and the 5E instructional model (engage, explore, explain, elaborate, and evaluate), students will investigate ?broken-by-design? Machine learning pipelines, perform structured threat modeling, and practice red-team, blue-team, and purple-team defense in realistic cloud security scenarios. Project nimbus plans to study the effectiveness of this learning environment using a mixed-methods design that examines students? Transfer of security reasoning across unfamiliar cloud architectures, as well as changes in cybersecurity self-efficacy, belonging, and professional identity. Data sources will include pre- and post-concept measures, rubric-scored performance artifacts, structured reflections, think-aloud protocols, and implementation feedback from instructors and students. The results of project nimbus will be disseminated through open instructional modules, instructor guides, assessment rubrics, sandbox setup materials, faculty development workshops, and cybersecurity education repositories. The NSF iuse: EDU program supports research and development projects to improve the effectiveness of stem education for all students. Through the engaged student learning track, the program supports the creation, exploration, and implementation of promising practices and tools. This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the foundation's intellectual merit and broader impacts review criteria.- subawards are not planned for this award.