权益分类	功能权益	普通用户	{{item.name}}会员
{{category.name}}	{{benefitItem.name}}

Applying principles of verbal short-term memory to cyber-security research

将言语短期记忆原理应用于网络安全研究

基本信息

批准号：
ES/V009745/1
负责人：
David Greeno
金额：
$ 13.22万
依托单位：
CARDIFF UNIVERSITY
依托单位国家：
英国
项目类别：
Fellowship
财政年份：
2020
资助国家：
英国
起止时间：
2020 至无数据
项目状态：
已结题

来源：
https://gtr.ukri.org/projects?ref=ES%2FV009745%2F1
关键词：
Applying principles verbal short term

项目摘要

The internet has allowed us to become increasingly connected. We can engage in a video conference call with colleagues anywhere in the world, email confidential information and engage remotely with friends and family. This allows work and socialisation to continue without physical contact. In light of the current pandemic this style of remote working and interaction has become essential. Additionally, as companies adjust to and accept remote working practices, they are likely to become more commonplace in the future. However, with increased digital inter-connectedness come increased cyber security risks. Sensitive personal and company information is a target for theft from individuals using a variety of inventive means (e.g. phishing attacks, ransomware, email scams). Such is the complexity of some of these attacks that it can be days or even weeks before they are noticed. However, during that time identities may have been cloned, fraudulent bank transfers undertaken, or new credit cards opened. It is becoming increasingly essential that we not only understand these cyber security risks, and what makes us more susceptible to them, but also that new ways are developed for individuals and companies to protect themselves from such risks.As part of the fellowship I will undertake a placement at the Airbus Cyber Innovation Hub and conduct work within the Cyber Lab (a joint initiative between Airbus and the Welsh Government to drive and deliver ground-breaking innovation in Wales). The Cyber Lab brings together many teams (e.g. cyber data analysts, cyber forensic teams) with a Human-Centric Cyber Security Team that explores research questions such as what makes individuals prone to certain security risks and how we can develop ways to help mitigate them. My PhD gave me a thorough understanding of many verbal short-term memory (vSTM) theories and ways in which vSTM is tested and researched. Such critical evaluation and understanding of vSTM tasks are sought after skills in cyber-security research and will prove highly useful when undertaking the placement at Airbus' Cyber Innovation Hub. This is because knowledge and understanding of vSTM is proving critical in understanding many of the issues that face us online. For example, Williams, Morgan and Joinson (2017) used serial recall - a very common vSTM task with the requirement to remember and then reproduce sequentially presented lists of items. Using serial recall enabled them to induce cognitive load (the amount of working memory resources being used) and to test whether users are more vulnerable to security breaches (e.g. fraudulent pop-ups) when experiencing higher cognitive load. Participants assessing pop-up authenticity while simultaneously completing serial recall were more likely to accept fraudulent security settings, than when those same messages could be assessed in isolation. From the increasing wealth of cyber security research incorporating vSTM tasks and theory, having a strong knowledge of vSTM is essential for understanding how users interact with machines and for developing more effective cyber security.During the placement I will assist with ongoing projects being conducted within the Cyber Innovation Hub. This will allow me to provide my insight into vSTM to help develop appropriate tasks and testing environments. It will also provide me with the opportunity to learn new research skills and forge new collaborative networks. Ultimately, it is the ideal opportunity in which to bridge my extensive knowledge of vSTM with cutting edge research into cyber security and begin forging a fruitful research relationship between industry and academia.During the fellowship, I will also promote the impact of my research among the academic community by engaging with a range of different audiences at national and international conferences. I will maximise this impact by publishing my papers in journals that attract a wide readership.

互联网让我们的联系越来越紧密。我们可以与世界上任何地方的同事进行视频电话会议，用电子邮件发送机密信息，并与朋友和家人远程交流。这使得工作和社交可以在没有身体接触的情况下继续进行。鉴于目前的大流行，这种远程工作和互动方式已变得至关重要。此外，随着公司适应并接受远程工作实践，它们在未来可能会变得更加普遍。然而，随着数字互联程度的提高，网络安全风险也在增加。个人和公司的敏感信息是通过各种创新手段（例如网络钓鱼攻击、勒索软件、电子邮件诈骗）从个人窃取的目标。由于这些攻击的复杂性，它们可能在几天甚至几周后才被发现。然而，在这段时间内，身份可能被克隆，进行欺诈性银行转账，或开设新的信用卡。越来越重要的是，我们不仅要了解这些网络安全风险，了解是什么让我们更容易受到这些风险的影响，还要开发新的方法，让个人和公司保护自己免受此类风险的影响。作为奖学金的一部分，我将在空中客车网络创新中心实习，并在网络实验室开展工作（空中客车公司和威尔士政府之间的一项联合倡议，旨在推动和提供威尔士的突破性创新）。网络实验室将许多团队（例如网络数据分析师、网络取证团队）与以人为本的网络安全团队结合在一起，探讨研究问题，例如是什么使个人容易受到某些安全风险，以及我们如何开发方法来帮助减轻这些风险。我的博士学位让我对许多语言短期记忆（vSTM）的理论以及vSTM的测试和研究方法有了深入的了解。这种对vSTM任务的批判性评估和理解是网络安全研究中所需要的技能，在空中客车网络创新中心进行实习时将被证明非常有用。这是因为vSTM的知识和理解对于理解我们在线面临的许多问题至关重要。例如，Williams、Morgan和Joinson（2017）使用了连续回忆——一种非常常见的vSTM任务，要求记住然后再现按顺序呈现的项目列表。使用连续回忆使他们能够诱导认知负荷（正在使用的工作记忆资源的数量），并测试用户在经历更高的认知负荷时是否更容易受到安全漏洞（例如欺诈性弹出窗口）的攻击。评估弹出式真实性的参与者在同时完成连续召回的同时更有可能接受欺诈性的安全设置，而不是单独评估相同的信息。从越来越多的网络安全研究中纳入vSTM任务和理论，拥有强大的vSTM知识对于理解用户如何与机器交互以及开发更有效的网络安全至关重要。在实习期间，我将协助网络创新中心内正在进行的项目。这将允许我提供我对vSTM的见解，以帮助开发适当的任务和测试环境。它也将为我提供学习新的研究技能和建立新的合作网络的机会。最终，这是一个理想的机会，可以将我对vSTM的广泛知识与网络安全的前沿研究结合起来，并开始在工业界和学术界之间建立富有成效的研究关系。在奖学金期间，我还将通过在国内和国际会议上与各种不同的受众接触，促进我的研究在学术界的影响。我将通过在吸引广泛读者的期刊上发表论文来最大化这种影响。