Cyber expert feedback: Experiences, expectations, and opinions about cyber deception
Ferguson-Walter, Kimberly J. Major, Maxine M. Johnson, Chelsea K. Johnson, Craig J. Scott, Dakota Gutzwiller, Robert S. Shade, Temmie
Ferguson-Walter, Kimberly J.
Major, Maxine M.
Johnson, Chelsea K.
Johnson, Craig J.
Scott, Dakota
Gutzwiller, Robert S.
Shade, Temmie
Citations
Altmetric:
Other Names
Location
Time Period
Advisors
Original Date
Digitization Date
Issue Date
2023-07-01
Type
Article
Genre
Keywords
Cyber security,Deception,Thematic analysis,Cyber attack,Human behavior,Decision-making biases
Subjects (LCSH)
Citation
Ferguson-Walter, K. J., Major, M. M., Johnson, C. K., Johnson, C. J., Scott, D. D., Gutzwiller, R. S., & Shade, T. (2023). Cyber expert feedback: Experiences, expectations, and opinions about cyber deception. Computers & Security, 130, 103268. https://doi.org/https://doi.org/10.1016/j.cose.2023.103268
Abstract
Human behavior is a critical, yet under-studied topic in cybersecurity. Among the techniques used for cyber defense, for cyber deception, a better understanding of human perception and behavior is crucial. To this point, the current study used a custom Deception Questionnaire to assess perceptions of cyber deception among experts. In this paper, we use a qualitative thematic analysis over the questionnaire responses, which provides a rich insight into the decision-making process of cyber attackers. Results reveal that experts were unlikely to expect deception, and upon encountering potential deception, a subset of attackers would increase and others decrease their attack activity in response. This work augments prior qualitative analyses indicating that cyber deception creates a psychological impact and behavioral change in cyber attackers. Results support the psychological impact and efficacy of deception to deter malicious actors and provide insights about how defenders might utilize deceptive strategies. © 2023
Table of Contents
Description
Click on the DOI to access this article (may not be free).
Publisher
Elsevier Ltd
Journal
Book Title
Series
Computers & Security
Volume 130
Volume 130
Digital Collection
Finding Aid URL
Use and Reproduction
Archival Collection
PubMed ID
DOI
ISSN
0167-4048