Toward Equitable Arabic Cybersecurity Literacy: A Rubric-Constrained LLM Framework for Phishing Detection and Bilingual Translation Fidelity

Arabic-speaking populations face disproportionate cybersecurity risks due to the predominantly English-centric design of existing awareness materials, which fail to accommodate Arabic dialectal diversity, script complexity, and culturally embedded communication patterns. These deficiencies impair users’ ability to interpret phishing messages, authentication requests, and security alerts, increasing susceptibility to social engineering, identity theft, and data breaches. This paper presents SECURE-A²RC, a rubric-constrained, Arabic-aware large language model framework designed to deliver scalable, interpretable, and culturally relevant cybersecurity education. The framework comprises two coupled components. The first, the Arabic-Aware Secure Communication Encoder (A-SCE), employs an instruction-tuned LLM to produce multidimensional encodings that capture three learner competencies: security intent comprehension; linguistic deception cue recognition encompassing urgency, authority impersonation, and incentive framing; and action-critical translation fidelity across Arabic dialectal registers and Arabic–English bilingual contexts. The second, the Rubric-Constrained Adaptive Feedback Generator (RCAFG), translates A-SCE encodings into personalized, expert-aligned instructional feedback and proficiency-calibrated adaptive tasks, ensuring pedagogical consistency, security correctness, and dialect awareness throughout the learning cycle. The framework is evaluated on three domain-relevant corpora: the English–Arabic Parallel Phishing Email Corpus, the Open MalSec dataset, and the Arabic Spam and Ham Tweets dataset. SECURE-A²RC achieves a 31% improvement in phishing identification accuracy and a 26% reduction in action-critical translation errors compared to conventional awareness materials. A comparative evaluation against SERENA, a Multi-Agent LLM, and the Arabic Multitask Learning Model confirms consistent superiority across detection accuracy, F1-score, dialectal robustness, and educational effectiveness metrics, affirming rubric-constrained LLM integration as a viable approach to equitable multilingual cybersecurity education.