This chapter explores the critical role of human factors in cybersecurity, emphasizing how cognitive biases and vulnerabilities impact decision-making and contribute to cyber risks. It introduces how cognitive elements, such as belief and suspicion, shape human decision-making and how these insights can be applied to enhance cyber defense, including awareness training and deceptive strategies. The chapter highlights the importance of designing adaptive and effective cognitive models that guide the development of human-aware cyber deception methods, potentially by utilizing game-theoretic approaches or foundation models. With the psychological and behavioral insights of all parties involved, defenders can anticipate and counteract attackers’ strategies more effectively. The discussion also addresses the challenges of implementing these strategies in real-world scenarios and outlines potential future directions for advancing cognition-inspired adaptive cybersecurity defenses.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Human Risks and Cognition-Inspired Adaptive Cyber Deception

  • Ya-Ting Yang,
  • Yunfei Ge,
  • Quanyan Zhu

摘要

This chapter explores the critical role of human factors in cybersecurity, emphasizing how cognitive biases and vulnerabilities impact decision-making and contribute to cyber risks. It introduces how cognitive elements, such as belief and suspicion, shape human decision-making and how these insights can be applied to enhance cyber defense, including awareness training and deceptive strategies. The chapter highlights the importance of designing adaptive and effective cognitive models that guide the development of human-aware cyber deception methods, potentially by utilizing game-theoretic approaches or foundation models. With the psychological and behavioral insights of all parties involved, defenders can anticipate and counteract attackers’ strategies more effectively. The discussion also addresses the challenges of implementing these strategies in real-world scenarios and outlines potential future directions for advancing cognition-inspired adaptive cybersecurity defenses.