A cognitive task analysis for cyber situational awareness

Mahoney, Samuel; Roth, Emilie M.; Steinke, Kristin; Pfautz, Jonathan; Wu, Curt; Farry, Mike

doi:10.1037/e578652012-003

Cited by 7 publications

(9 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The awareness needs we identified under Network Architecture and State and Behavior of the Network above are closely related to a domain analysis done by Mahoney and colleagues[20]. The categories derived by Mahoney of element Health Awareness, Activity Awareness, and Connectivity Awareness gain support from our current findings.…”

supporting

confidence: 80%

“…The goal of the current work was to conduct a preliminary cyber-defender cognitive task analysis to identify key elements of information analysts must attend to during operations to guide their decision-making. Existing cognitive task analyses provided starting points [20], [21]. With the amalgamation of tools and interfaces available, awareness metrics need to be agnostic to particular software.…”

Section: A Current State Of Cyber-cognitive Situation Awarenessmentioning

confidence: 99%

“…One analyst commented, for example, "The actual health, packets flowing. The 'Customer Activities' category described here is very similar to Social / Organizational / Behavioral Awareness -a customer organization's activity that affects the network's health or persistent behavioral traits[20], especially activities or procedures which are decided arbitrarily by the customer as to what is acceptable.…”

mentioning

confidence: 99%

See 2 more Smart Citations

A task analysis toward characterizing cyber-cognitive situation awareness (CCSA) in cyber defense analysts

Gutzwiller

Hunt

Lange

2016

2016 IEEE International Multi-Disciplinary Conference on Cognitive Methods in Situation Awareness and Decision Support (CogSIMA

View full text Add to dashboard Cite

Cyberspace is an increasingly crucial part of everyday living. We have long recognized that defending this space is complex, requiring information integration, and decisions of man and machine to coalesce in a dynamic environment full of shifting priorities. These properties suggest that, as in other domains with similar characteristics, situation awareness (SA) of a human cyber defender is paramount to the quality of decision outcomes in cyber defense. The majority of existing research in cyber situation awareness, centers on information systems and computers, which piece together disparate data. Fused data from multiple sources, for example, is necessary for cyberspace visualization efforts. The judgment for successful cyber SA from this perspective is different from one that is human-centered. In comparison, we rarely assess human cognitive awareness in cyberspace. In part, this reflects a need, based on prior theory, to first define critical elements of information that the human must perceive, work to elucidate how humans combine these elements to comprehend the state of the network, and how together, this awareness helps analysts predict the future state of the network. In other words, although data fusion can provide value by reducing the cognitive load created to piece together disparate sources of information, human awareness of the network (cyber-cognitive situation awareness-CCSA) is perhaps the ultimate intermediary for defense performance. Toward such an understanding, we discuss the results of a cognitive task analysis (CTA) which sought to determine the goals and abstracted elements of awareness that cyber analysts seek in network defense. We present the foundation for a series of planned experiments that establishes CCSA measurement, and baselines the efforts of cyber defenders. Once assessed, we can then begin to consider the help offered by fusion systems, automation of defensive capabilities, and cyber visualizations in a methodologically rigorous manner that has been lacking.

show abstract

supporting

confidence: 80%

Section: A Current State Of Cyber-cognitive Situation Awarenessmentioning

confidence: 99%

mentioning

confidence: 99%

See 1 more Smart Citation

A task analysis toward characterizing cyber-cognitive situation awareness (CCSA) in cyber defense analysts

Gutzwiller

Hunt

Lange

2016

2016 IEEE International Multi-Disciplinary Conference on Cognitive Methods in Situation Awareness and Decision Support (CogSIMA

View full text Add to dashboard Cite

show abstract

“…Some studies have dealt with cybersecurity through analyzing situational awareness which includes cognitive studies [22,23,24,25] while some others have studied behavioral aspects to understand general cybersecurity awareness in organizations [26,27,28]. In this paper, we also aimed to understand the antecedents and consequents of general cybersecurity awareness among maritime employees, which are shown in Figure 1 and Table 1.…”

Section: Antecedentsmentioning

confidence: 99%

Antecedents and Consequences of Cybersecurity Awareness: A Case Study for Turkish Maritime Sector

Bolat¹,

Kayişoğlu²

2019

J ETA Maritime Sci

View full text Add to dashboard Cite

Cybersecurity awareness has become an important issue in maritime transportation as well as in other sectors. In this paper, after analyzing maritime cybersecurity literature, it is aimed to understand the factors of antecedents and consequences of cybersecurity awareness in maritime domain by taking Turkish Maritime Sector as a case study. Structural Equation Modeling is used for understanding the factors by validating a questionnaire data from 211 maritime employees who graduated from the Department of Marine Transportation Management Engineering and Marine Engineering in Turkey. It is found that (a) education is a significant factor in enhancing the maritime cybersecurity awareness of employee's and their attitudes towards cybersecurity; (b) cybersecurity incidents or experiences significantly influence employee's cybersecurity awareness and their behavior; (c) maritime cybersecurity awareness significantly affects secure user behavior. In addition, results showed that rules and policies with information sharing do not have any significant effect on cybersecurity awareness and on the development of secure employee behavior.

show abstract

“…Cognitive Task Analysis (CTA [4]) is the extension of traditional task analysis techniques to yield information about the knowledge, thought processes and goal structures that underlie observable task performance. The outcome of CTA describes the performance objectives, equipment, conceptual knowledge, procedural knowledge and performance standards used by experts as they perform a task.…”

Section: Introductionmentioning

confidence: 99%

Cognitive Task Analysis Based Training for Cyber Situation Awareness

Huang

Shen

Doshi

et al. 2015

Information Security Education Across the Curriculum

View full text Add to dashboard Cite

Part 1: Innovative MethodsInternational audienceCyber attacks have been increasing significantly in both number and complexity, prompting the need for better training of cyber defense analysts. To conduct effective training for cyber situation awareness, it becomes essential to design realistic training scenarios. In this paper, we present a Cognitive Task Analysis based approach to address this training need. The technique of Cognitive Task Analysis is to capture and represent knowledge used by experts to perform complex tasks. Accurate characterization of cyber security experts’ cognitive processes can be incorporated into training materials to teach novice cyber analysts how to think and act like experts. After performing Cognitive Task Analysis of cyber situation awareness, we identify the steps necessary for designing training scenarios and training workflows. In order to address the challenge of information overload confronting the cyber analysts, we identify and design attack-specific watch list items. During training, cyber analysts can tailor their own watch list items and triggering thresholds in order to detect cyber attacks faster. As the time it takes for cyber analysts to recognize, analyze, and respond to attacks is critical, we evaluate cyber analysts’ performance based on their response time compared with the ideal attack timeline

show abstract

A cognitive task analysis for cyber situational awareness

Cited by 7 publications

References 0 publications

A task analysis toward characterizing cyber-cognitive situation awareness (CCSA) in cyber defense analysts

A task analysis toward characterizing cyber-cognitive situation awareness (CCSA) in cyber defense analysts

Antecedents and Consequences of Cybersecurity Awareness: A Case Study for Turkish Maritime Sector

Cognitive Task Analysis Based Training for Cyber Situation Awareness

Contact Info

Product

Resources

About