User detection of threats with different security measures

Yoav Ben-Yaakov, Joachim Meyer, Xinrun Wang, Bo An

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

Cyber attacks and the associated costs made cybersecurity a vital part of any system. User behavior and decisions are still a major part in the coping with these risks. We developed a model of optimal investment and human decisions with security measures, given that the effectiveness of each measure depends partly on the performance of the others. In an online experiment, participants classified events as malicious or non-malicious, based on the value of an observed variable. Prior to making the decisions, they had invested in three security measures-a firewall, an IDS or insurance. In three experimental conditions, maximal investment in only one of the measures was optimal, while in a fourth condition, participants should not have invested in any of the measures. A previous paper presents the analysis of the investment decisions. This paper reports users' classifications of events when interacting with these systems. The use of security mechanisms helped participants gain higher scores. Participants benefited in particular from purchasing IDS and/or Cyber Insurance. Participants also showed higher sensitivity and compliance with the alerting system when they could benefit from investing in the IDS. Participants, however, did not adjust their behavior optimally to the security settings they had chosen. The results demonstrate the complex nature of risk-related behaviors and the need to consider human abilities and biases when designing cyber security systems.

Original languageEnglish
Title of host publicationProceedings of the 2020 IEEE International Conference on Human-Machine Systems, ICHMS 2020
EditorsGiancarlo Fortino, Fei-Yue Wang, Andreas Nurnberger, David Kaber, Rino Falcone, David Mendonca, Zhiwen Yu, Antonio Guerrieri
PublisherInstitute of Electrical and Electronics Engineers Inc.
ISBN (Electronic)9781728158716
DOIs
StatePublished - Sep 2020
Event1st IEEE International Conference on Human-Machine Systems, ICHMS 2020 - Virtual, Rome, Italy
Duration: 7 Sep 20209 Sep 2020

Publication series

NameProceedings of the 2020 IEEE International Conference on Human-Machine Systems, ICHMS 2020

Conference

Conference1st IEEE International Conference on Human-Machine Systems, ICHMS 2020
Country/TerritoryItaly
CityVirtual, Rome
Period7/09/209/09/20

Keywords

  • Alerting systems
  • Cybersecurity
  • Decision making

Fingerprint

Dive into the research topics of 'User detection of threats with different security measures'. Together they form a unique fingerprint.

Cite this