Behavioral Determinants of Target Shifting and Deterrence in an Analog Cyber-Attack Game.

Behavioral Determinants of Target Shifting and Deterrence in an Analog Cyber-Attack Game.
复制标题

模拟网络攻击游戏中目标转移和威慑的行为决定因素。

DOI:
10.1111/risa.13402
复制
发表时间:
2020
期刊:
Risk analysis : an official publication of the Society for Risk Analysis
影响因子:
--
通讯作者:
John,RichardS
John,RichardS
中科院分区:
--
文献类型:
--
作者:
Kusumastuti,SarahA;Blythe,Jim;Rosoff,Heather;John,RichardS

文献摘要

相似文献

This study examines how exploiting biases in probability judgment can enhance deterrence using a fixed allocation of defensive resources. We investigate attacker anchoring heuristics for conjunctive events with missing information to distort attacker estimates of success for targets with equal defensive resources. We designed and conducted a behavioral experiment functioning as an analog cyber attack with multiple targets requiring three stages of attack to successfully acquire a target. Each stage is associated with a probability of successfully attacking a layer of defense, reflecting the allocation of resources for each layer. There are four types of targets that have nearly equal likelihood of being successfully attacked, including one type with equally distributed success probabilities over every layer and three types with success probabilities that are concentrated to be lowest in the first, second, or third layer. Players are incentivized by a payoff system that offers a reward for successfully attacked targets and a penalty for failed attacks. We collected data from a total of 1,600 separate target selections from 80 players and discovered that the target type with the lowest probability of success on the first layer was least preferred among attackers, providing the greatest deterrent. Targets with equally distributed success probabilities across layers were the next least preferred among attackers, indicating greater deterrence for uniform‐layered defenses compared to defenses that are concentrated at the inner (second or third) levels. This finding is consistent with both attacker anchoring and ambiguity biases and an interpretation of failed attacks as near misses.