EAGER: Integrating Cognitive and Computer Science to Improve Cyber Security: Selective Attention and Personality Traits for the Detection and Prevention of Risk

越来越需要更好地了解网络安全中的行为和认知因素。该项目是计算机科学网络安全研究人员和认知科学研究人员之间的一项新合作，旨在生成有关人格特质和网络安全之间联系的数据。所提出的研究的广泛的理论前提是，有特定的认知偏好和相关的个性因素，可以在真实的时间，真实的世界的情况下进行评估，这些可能与个人用户的安全/不安全的网络行为。通过创新的软件架构，使受试者沉浸在现实的网络场景中，测试特质焦虑和冷酷无情的非情感特质的人格特征，以检查对某些刺激的反应延迟，人格因素和网络行为之间的联系。通过研究人格特质和网络行为之间的联系，有可能开发自适应软件系统，如用户界面、警报系统和安全监控器，这些系统可以利用个人的刺激偏好来大幅降低网络攻击的风险或影响。该研究的数据将为未来的自适应网络安全机制工作提供信息，更好地适应个人用户特征。这项研究可能会影响社会的所有部门，因为公民个人以及执法，军事和企业界都受益于研究工作，可以促进更好的网络安全方法的发展。此外，心理学和网络安全研究社区将受益于该项目的结果和开发的软件架构。

Increasingly, there is a need for better understanding of behavioral and cognitive factors in cyber security. This project is a novel collaboration between computer science cyber security researchers and a cognitive science researcher to generate data on the links between personality traits and cyber security. The broad theoretical premise of the proposed research is that there are particular cognitive preferences and related personality factors that can be assessed in real time, real world scenarios and these may be associated with individual user's secure/insecure cyber behavior. The personality characteristics of trait anxiety and callous unemotional traits are tested via innovative software architecture for immersing subjects in realistic cyber scenarios, to examine the links between response latencies for certain stimuli, personality factors, and cyber behaviors. By studying the links between personality traits and cyber behaviors, it may be possible to develop adaptive software systems, such as user interfaces, alerting systems, and security monitors that tap individual stimuli preferences to substantially reduce the risks or effects of cyber-attacks. The data from the study will inform future work in adaptive cyber security mechanisms, better tailored to individual user traits. The research potentially impacts all sectors of society, since individual citizens, as well as the law enforcement, military, and corporate communities all benefit from research efforts that could facilitate development of better cyber security methods. Furthermore, the psychology and cyber security research communities will benefit from the results of this project and the developed software architecture.