Using Choice Overload to Degrade Cyber Attacks
摘要
When people make decisions where there are many options and complex information available, they may experience choice overload. This effect can lead to slower and lower-quality decisions, as well as increased feelings of regret and uncertainty. This effect has been extensively studied in the literature on behavioral decision-making, primarily in the area of consumer choice. We investigate whether cyber attackers exhibit similar detrimental effects of choice complexity on decision-making, and whether this can be exploited to enable new types of cyber defenses based on increasing the difficulty for cyber attackers. We design a conceptual replication of the choice overload effect based on a classic study from the literature, and then extend this to two realistic decisions in a cyber attack context. We replicate the core findings of choice overload and demonstrate that cyber attackers experience similar adverse effects associated with increased choice complexity. However, we find that the complexity of choices in realistic situations is not fully captured by the number of options and amount of information available, so a deeper understanding of the factors influencing complexity will be needed to exploit choice overload to enhance cybersecurity fully.