The Role of Human Operators' Suspicion in the Detection of Cyber Attacks
The Role of Human Operators' Suspicion in the Detection of Cyber Attacks
复制标题
人类操作员的怀疑在网络攻击检测中的作用
DOI：
--
复制
发表时间：
2015
影响因子：
0.5
通讯作者：
B. Knott
中科院分区：
文献类型：
--
作者：
Leanne M. Hirshfield;P. Bobko;Alex J. Barelka;Mark R. Costa;G. Funke;Vincent F. Mancuso;V. Finomore;B. Knott
尽管在最近的报告中，人为错误在网络领域的重要性，但迄今为止，网络战研究主要集中在网络攻击对目标计算机系统的影响上。相比之下，很少有经验的工作，在网络入侵过程中的人类操作员的作用。更具体地说，有必要了解在攻击发生时起作用的人为因素。本文通过怀疑的透镜来看待网络攻击，怀疑是一种在其他情况下使用的结构，但在先前的研究中定义不充分。在定义了怀疑的结构之后，作者展示了怀疑作为计算机操作员的正常工作行为与他们改变这种行为以检测和应对网络攻击的能力之间的管道的作用。通过关注用户，而不是目标计算机，作者根据经验为各种类型的网络攻击开发了一个潜在结构，将该结构与操作员的怀疑水平联系起来，将怀疑与用户的认知和情绪状态联系起来，并为网络培训开发了初步的影响。
Despite the importance that human error in the cyber domain has had in recent reports, cyber warfare research to date has largely focused on the effects of cyber attacks on the target computer system. In contrast, there is little empirical work on the role of human operators during cyber breaches. More specifically, there is a need to understand the human-level factors at play when attacks occur. This paper views cyber attacks through the lens of suspicion, a construct that has been used in other contexts, but inadequately defined, in prior research. After defining the construct of suspicion, the authors demonstrate the role that suspicion plays as the conduit between computer operators' normal working behaviors and their ability to alter that behavior to detect and react to cyber attacks. With a focus on the user, rather than the target computer, the authors empirically develop a latent structure for a variety of types of cyber attacks, link that structure to levels of operator suspicion, link suspicion to users' cognitive and emotional states, and develop initial implications for cyber training.
DOI：
10.1016/0005-7916(94)90063-9
发表时间：
1994-03-01
影响因子：
1.8
作者：
BRADLEY, MM;LANG, PJ
通讯作者：
LANG, PJ