Psychosocial Approach to Cyber Threat Intelligence
Kitty Kioskli, Nineta Polemi · International Journal of Chaotic Computing · 2020
Cyber attackers continuously show new levels of intention by performing more sophisticated attacks on networks and important infrastructures (e.g., hospitals).This is an urgent situation calling for a swift improvement for cyber defenders.Hence, a paradigm shift is necessary to ameliorate the effectiveness of current practices.Behavioural, social and psychological related information about the attackers is considered in this paper, important elements of the Cyber Threat Intelligence (CTI) that improve cyber defense practices.The aims of this paper are to firstly provide a review of relevant behavioural and social theories and models that can be used for better capturing the attackers' characteristics and then to utilize them by giving insights on more realistic security measurements. Behaviour and Social TheoriesResearch efforts [8] are being conducted, in combating cybercrime study technical and human factors, to determine cybercriminal behaviours.This is achieved by using multidisciplinary approaches from various scientific domains (e.g., social sciences, criminology, anthropology, cyberpsychology).Behavioural scientists claim that there is not adequate knowledge about the behaviour of the user (whether legitimate or illegal) in relation to Information Technologies (IT) in general, and