Market Assessment of an intelligent framework for social engineering cyber security training

点击翻译按钮获取中文摘要

Human beings are the weakest link in cybersecurity, and are, in fact, more vulnerable than computers. In recent years, countless major security incidents have succeeded because of human errors and the lack of appropriate security training and awareness. In this regard, although there is a wide range of cybersecurity products in the market to protect computers and networks, almost none or a few immature products exist for developing and training users in cybersecurity awareness. Organizations are still relying on hands-on workshops, online courses, and traditional training methods for cybersecurity awareness, which are ineffective and unscalable. We have developed a new multilayer technology for cybersecurity awareness training to help organizations understand and mitigate potential security risks associated with social engineering threats. Our technology utilizes the principles of artificial intelligence, gamification theory and cybersecurity strategies for enabling organizations to implement a social engineering firewall. Using deep reinforcement learning algorithms, the proposed approach provides an estimation of potential social engineering threats for a given organization by measuring the digital footprint of the organization assets on public sources, including the Internet, social networks and media, among others. Based on the estimated social engineering threat, our technology constructs and executes an interactive anti-social engineering training program that combines both passive and active training. Our technology then creates and recommends a social engineering firewall security strategy that is used within the organization network to reduce and mitigate the risk of any potential social engineering threats. The main goal of this project is to conduct a market study for the proposed technology, which will be used to assess the market potential of the technology in anticipation of transferring it to existing cybersecurity companies.