Re-thinking Decision-Making in Cybersecurity: Leveraging Cognitive Heuristics in Situations of Uncertainty

Simple item page
dc.contributor.author Schaltegger, Thierry
dc.contributor.author Ambuehl, Benjamin
dc.contributor.author Ackermann, Kurt Alexander
dc.contributor.author Ebert, Nico
dc.date.accessioned 2023-12-26T18:44:47Z
dc.date.available 2023-12-26T18:44:47Z
dc.date.issued 2024-01-03
dc.identifier.isbn 978-0-9981331-7-1
dc.identifier.other a73d4932-a1d9-4e82-b148-e4ae8ff6acb0
dc.identifier.uri https://hdl.handle.net/10125/106953
dc.language.iso eng
dc.relation.ispartof Proceedings of the 57th Hawaii International Conference on System Sciences
dc.rights Attribution-NonCommercial-NoDerivatives 4.0 International
dc.rights.uri https://creativecommons.org/licenses/by-nc-nd/4.0/
dc.subject Innovative Behavioral IS Security and Privacy Research
dc.subject cognitive heuristics
dc.subject cybersecurity decision-making
dc.subject ecological rationality
dc.subject intuition
dc.subject uncertainty
dc.title Re-thinking Decision-Making in Cybersecurity: Leveraging Cognitive Heuristics in Situations of Uncertainty
dc.type Conference Paper
dc.type.dcmi Text
dcterms.abstract The prevailing consensus in cybersecurity is that individuals’ insecure behavior due to inadequate decision-making is a primary source of cyber incidents. The conclusion of this assumption is to enforce desired behavior via extensive security policies and suppress individuals’ intuitions or rules of thumb (cognitive heuristics) when dealing with critical situations. This position paper aims to change the way we look at these cognitive heuristics in cybersecurity. We argue that heuristics can be particularly useful in uncertain environments such as cybersecurity. Based on successful examples from other domains, we propose that heuristic decision-making should also be used to combat cyber threats. Lastly, we give an outlook on where such heuristics could be beneficial in cybersecurity (e.g., phishing detection or incident response) and how they can be found or created.
dcterms.extent 10 pages
prism.startingpage 4734
Files
Original bundle
Now showing 1 - 1 of 1
No Thumbnail Available
Name:
0466.pdf
Size:
427.28 KB
Format:
Adobe Portable Document Format
Description:
Download
Collections
Innovative Behavioral IS Security and Privacy Research