The Human Factors of Cyber Network Defense

Abstract

Technology’s role in the fight against malicious cyber-attacks is critical to the increasingly networked world of today. Yet, technology does not exist in isolation: the human factor is an aspect of cyber-defense operations with increasingly recognized importance. Thus, the human factors community has a unique responsibility to help create and validate cyber defense systems according to basic principles and design philosophy. Concurrently, the collective science must advance. These goals are not mutually exclusive pursuits: therefore, toward both these ends, this research provides cyber-cognitive links between cyber defense challenges and major human factors and ergonomics (HFE) research areas that offer solutions and instructive paths forward. In each area, there exist cyber research opportunities and realms of core HFE science for exploration. We raise the cyber defense domain up to the HFE community at-large as a sprawling area for scientific discovery and contribution.

References

Altmann

E. M.

Trafton

J. G.

(2002). Memory for goals: an activation-based model. Cognitive Science, 26(1), 39–83.

Altmann

E. M.

Trafton

J. G.

(2004). Task interruption: Resumption lag and the role of cues. Michigan State University.

Bainbridge

(1983). Ironies of automation. Automatica, 19(6), 775–779.

Ballora

Giacobe

N. A.

Hall

D. L.

(2011). Songs of cyberspace: An update on sonifications of network traffic to support situational awareness. SPIE Defense, Security, & Sensing, 8064, 80640P–6.

Bass

(2000). Intrusion detection systems and multisensor data fusion: creating cyberspace situational awareness. ACM, 43(4), 99-105.

Bennett

K. B.

(2014). Veils: an ecological interface for computer network defense. Proc Hum Fctrs Ergnmcs Soc Ann Mtg, 58 (1), 1233-37.

Boyce

Duma

Hettinger

Malone

Wilson

Lockett-Reynolds

(2011). Human performance in cybersecurity: a research agenda. Proc of the Hum Fctrs Ergnmcs Soc Ann Mtg, 55, 1115–1119.

Champion

Rajivan

Cooke

Jariwala

(2012). Team-based cyber defense analysis. CogSIMA, 218–221.

Clegg

Martey

Stromer-Galley

Kenski

Saulnier

Folkestad

… Tomek

(2014). Game-based training to mitigate three forms of cognitive bias. I/ITSEC, (14180), 1–12.

10.

Conti

Ahamad

Stasko

(2005). Attacking information visualization system usability overloading and deceiving the human. Symposium on Usable Privacy and Security - SOUPS ’05, 89–100.

11.

D’Amico

Whitley

Tesone

O’Brien

Roth

(2005). Achieving cyber defense situational awareness: a cognitive task analysis of information assurance analysts. Proc of the Hum Fctrs Ergnmcs Soc Ann Mtg, 49, 229–233.

12.

De Greef

Arciszewski

Neerincx

(2010). Adaptive automation based on an object-oriented task model: Implementation and evaluation in a realistic C2 environment. JCEDM, 4(2), 152–182.

13.

DHS. (2013). Incident Response Activity: Trends in incident response in 2013. ICT-CERT Monitor, (December), 1–14.

14.

Dodhia

Dismukes

(2009). Interruptions create prospective memory tasks. Applied Cognitive Psychology, 89, 73–89.

15.

Dutt

Ahn

Y.-S. Y.-S.

Gonzalez

(2013). Cyber situation awareness: modeling detection of cyber attacks with instance-based learning theory. Human Factors, 55(3), 605–618.

16.

Einhorn

H. J.

Hogarth

R. M.

(1978). Confidence in judgment: Persistence of the illusion of validity. Psychological Review, 85(5), 395–416.

17.

Endsley

M. R.

(1995). Toward a theory of situation awareness in dynamic systems. Human Factors, 37(1), 32–64.

18.

Fink

G. A.

North

C. L.

Endert

Rose

(2009). Visualizing cyber security: Usable workspaces. Visualization for Cyber Security, 45–56.

19.

Ford

Glymour

Hayes

(1997). Cognitive prostheses. AI Magazine, 18(3), 1997.

20.

Franke

Brynielsson

(2014). Cyber situational awareness – a systematic review of the literature. Computers & Security, 46, 18–31.

21.

Garnaeva

Chebyshev

Makrushin

Unuchek

Ivanov

(2014). Kaspersky security bulletin 2014. Kaspersky Lab, 1–31.

22.

Gibson

(2003). Burning Chrome (p. 179). New York, NY: HarperCollins.

23.

Goodall

J. R.

Sowul

(2009). VIAssist: Visual analytics for cyber defense. IEEE Conference on Tech for Homeland Security, 143–150.

24.

Gutzwiller

R. S.

Clegg

B. A.

Blitch

J. G.

(2013). Part-task training in the context of automation: Current and future directions. American Journal of Psychology, 126(4), 417-432.

25.

Gutzwiller

R. S.

Lange

D. S.

Reeder

Morris

R. L.

Rodas

(2015). Human-computer collaboration in adaptive supervisory control and function allocation of autonomous system teams. HCI International.

26.

Gutzwiller

R. S.

Wickens

C. D.

Clegg

B. A.

(2014). Workload overload modeling: An experiment with MATB II to inform a computational model of task management. Proceedings of the Human Factors and Ergonomics Society Annual Meeting, 58, 849-853

27.

Hancock

P. A.

(2009). Mind, machine and morality: Toward a philosophy of human-technology symbiosis (pp. 1–184). Ashgate Publishing, Ltd.

28.

Hancock

P. A

(2013). In search of vigilance: the problem of iatrogenically created psychological phenomena. American Psychologist, 68(2), 97.

29.

Hancock

P. A.

Billings

D. R.

Schaefer

K. E.

Chen

J. Y. C.

de Visser

E. J.

Parasuraman

(2011). A meta-analysis of factors affecting trust in human-robot interaction. Human Factors, 53(5), 517–527.

30.

Hancock

P. A.

Sawyer

B. D.

Stafford

(2015). The effects of display size on performance. Ergonomics, 58(3), 337-354.

31.

Hancock

P. A.

Pepe

A. A.

Murphy

L. L.

(2005). Hedonomics: The power of positive and pleasurabe ergonomics. Ergonomics in Design, 13(1), 8–14.

32.

Hancock

P. A.

Warm

(1989). A dynamic model of stress and sustained attention. Human Factors, 31(5), 519-537.

33.

Hao

Healey

C. G.

Hutchinson

S. E.

(2013). Flexible web visualization for alert-based network security analytics. VizSec, 33–40.

34.

Kaber

D. B.

(2013). Adaptive automation. In Lee

Kirlik

(Eds.), Oxford Handbook of Cognitive Engineering. Oxford University Press.

35.

Knott

Mancuso

Bennett

Finomore

McNeese

McKneely

. (2013). Human factors in cyber warfare: Alternative perspectives. Proc of Hum Fctrs Ergnmcs Soc Ann Mtg, 57, 399–403.

36.

Line

Zand

Stringhini

Kemmerer

(2014). Targeted attacks against industrial control systems: is the power industry prepared? ACM Workshop on Smart Energy Grid Security, 13–22.

37.

Mahoney

Roth

Steinke

Pfautz

Farry

(2010). A cognitive task analysis for cyber situational awareness. Proc of the Hum Factors and Ergonomics Society Annual Meeting, 54, 279–283.

38.

Mancuso

V. F.

Christensen

J. C.

Cowley

Finomore

Gonzalez

Knott

(2014). Human factors in cyber warfare II: Emerging perspectives. Proc of the Hum Fctrs Ergnmcs Soc Ann Mtg, 58, 415-8.

39.

Mancuso

V. F.

Minotra

Giacobe

McNeese

Tyworth

(2012). idsNETS: An experimental platform to study situation awareness for intrusion detection analysts. CogSIMA, 73–79.

40.

Mancuso

V. F.

Strang

A. J. A.

Funke

G. J.

Finomore

V. S.

(2014). Human factors of cyber attacks: A framework for human-centered research. Proc of the Hum Fctrs Ergnmcs Soc Ann Mtg, 58, 437-41.

41.

McNeese

Cooke

N. J.

D’Amico

Endsley

M. R.

Gonzalez

Roth

Salas

(2012). Perspectives on the role of cognition in cyber security. Proc of Hum Fctrs Ergnmcs Soc Ann Mtg, 56, 268-71.

42.

Norman

(1992). Design principles for cognitive artifacts. Research in Engineering Design, 4, 43–50.

43.

Onnasch

Wickens

C. D.

Manzey

(2014). Human performance consequences of stages and levels of automation: an integrated meta-analysis. Human Factors, 56(3), 476–488.

44.

Parasuraman

Manzey

D. H.

(2010). Complacency and bias in human use of automation: An attentional integration. Human Factors, 52(3), 381–410.

45.

Paul

(2014). Human-centered study of a network operations center: experience report and lessons learned. ACM Workshop, 39–42.

46.

Rajivan

Janssen

Cooke

(2013). Agent-based model of a cyber security defense analyst team. Proceedings of the Human Factors and Ergonomics Society Annual Meeting, 57, 314-318.

47.

Sametinger

Rozenblit

Lysecky

Ott

(2015). Security challenges for medical devices. Comm of the ACM, 58(4), 74–82.

48.

Sawyer

B. D.

Finomore

V. S.

Funke

Warm

J. S.

Matthews

Hancock

P.A.

(2015). Cyber vigilance: the human factor. Ergonomics

49.

Sawyer

B. D.

Finomore

V. S.

Funke

Mancuso

Funke

… Warm

J. S.

(2014). Cyber vigilance: effects of signal probability and event rate. Proc of the Hum Fctrs Ergnmcs Soc Ann Mtg, 58(1), 1771–1775.

50.

Shope

(2013). Effective cyber situation awareness (CSA) assessment and training. US Army Final Report W911NF-13-C-0060.

51.

Singer

Friedman

(2014). Cybersecurity: What everyone needs to know (pp. 1–224). USA: OUP.

52.

Staheli

Crouser

Damodaran

Nam

O’Gwynn … Harrison

(2014). Visualization evaluation for cyber security: Trends and future directions. VizSec, 49-56.

53.

Smith

Hancock

P. A.

(1995). Situation awareness is adaptive, externally directed consciousness. Human Factors, 37(1), 137-148.

54.

Stanton

Booth

Stammers

(1992). Alarms in human supervisory control: A human factors perspective. International Journal of Computer Integrated Manufacturing, 5(2), 81–93.

55.

Tenney

Pew

(2006). Situation awareness catches on: What? So what? Now what? Reviews of Human Factors and Ergonomics.

56.

Thompson

Rantanen

Yurcik

Bailey

(2007). Command line or pretty lines?: Comparing textual and visual interfaces for intrusion detection. Proceedings of the ACM CHI.

57.

Vickers

Laing

Debashi

Fairfax

(2014). Sonification aesthetics and listening for network situational awareness. SoniHED.

58.

Wickens

C. D.

(2014). Noticing events in the visual workplace: The SEEV and NSEEV models. In Hoffman

Parasuraman

(Eds.), Handbook of Applied Perception. Cambridge University Press.

59.

Wickens

C. D.

Alexander

A. L.

(2009). Attentional tunneling and task management in synthetic vision displays. International Journal of Aviation Psychology, 19(2), 182–199.

60.

Wickens

C. D.

Gutzwiller

R. S.

Santamaria

(2015). Discrete task switching in overload: A meta-analysis and a model. International Journal of Human-Computer Systems, 79, 79-84.

61.

Wickens

C. D.

Hollands

Banbury

Parasuraman

(2013). Engineering psychology and human performance (4th ed.). Upper Saddle River, NJ: Pearson.

62.

Wickens

C. D.

Hutchins

Carolan

Cumming

(2012). Attention and cognitive resource load in training strategies. Healy

A. F.

Bourne

L. E.

(Eds.), Training Cognition (pp. 67–88). NY:Psychology Press.

63.

Wiener

(1965). Cybernetics or Control and Communication in the Animal and the Machine (Vol. 25). MIT Press.

64.

Wightman

D. C.

Lintern

(1985). Part-task training for tracking and manual control. Human Factors, 27(3), 267–283.

65.

Woods

D. D.

(1995). The alarm problem and directed attention in dynamic fault management. Ergonomics, 38(11), 2371–2393.