Emergent Behavior in Cybersecurity

Shouhuai Xu

DOI: https://doi.org/10.48550/arXiv.1502.05102

2015-02-18

Cryptography and Security

Abstract:We argue that emergent behavior is inherent to cybersecurity.

What problem does this paper attempt to address?

Event Evolution Model for Cybersecurity Event Mining in Tweet Streams

Xiuwen Liu,Jianming Fu,Yanjiao Chen

DOI: https://doi.org/10.1016/j.ins.2020.03.048

IF: 8.1

2020-01-01

Information Sciences

Abstract:The rich source of online reports and discussions on social media can be leveraged to investigate the widespread cyber-attacks. In this paper, we study the problem of cybersecurity event mining based on continuous tweet streams. In contrast to traditional static methods that do not consider event evolution, we explore relevance among historical and online events for cyber-attack event discovery and evolution detection. We propose CyberEM, a novel event evolution model with a special focus on cybersecurity events. A pattern clustering algorithm and an NMF-based (non-negative matrix factorization) event aggregation algorithm are devised for cyber-attack indicator extraction and event evolution detection. We leverage both the patterns that belong to the cybersecurity domain and the patterns of the semantic contexts of cybersecurity to refine evolutionary relevance of events across multiple time intervals. Furthermore, we design a dynamic event inference algorithm to discover cybersecurity events and update event aggregation in an online manner. Through extensive evaluations with a large-scale real-world tweet dataset, we demonstrate the superiority of the proposed CyberEM model over existing methods in identifying cybersecurity events and their evolutionary relevance.
Cybersecurity Dynamics

Shouhuai Xu

DOI: https://doi.org/10.48550/arXiv.1502.05100

2015-02-18

Abstract:We explore the emerging field of {\em Cybersecurity Dynamics}, a candidate foundation for the Science of Cybersecurity.

Cryptography and Security
Citizens’ Cybersecurity Behavior: Some Major Challenges

Ying Li,Tong Xin,Mikko Siponen

DOI: https://doi.org/10.1109/MSEC.2021.3117371

IF: 3.105

2022-01-01

IEEE Security & Privacy

Abstract:Citizens’ cybersecurity behaviors are an important concern in the modern age. This work discusses the challenges of studying citizen cybersecurity behaviors and the directions for future research.
Active Cyber Defense Dynamics Exhibiting Rich Phenomena.

Ren Zheng,Wenlian Lu,Shouhuai Xu

DOI: https://doi.org/10.1145/2746194.2746196

2015-01-01

Abstract:The Internet is a man-made complex system under constant attacks (e.g., Advanced Persistent Threats and malwares). It is therefore important to understand the phenomena that can be induced by the interaction between cyber attacks and cyber defenses. In this paper, we explore the rich phenomena that can be exhibited when the defender employs active defense to combat cyber attacks. To the best of our knowledge, this is the first study that shows that active cyber defense dynamics (or more generally, cybersecurity dynamics) can exhibit the bifurcation and chaos phenomena. This has profound implications for cyber security measurement and prediction: (i) it is infeasible (or even impossible) to accurately measure and predict cyber security under certain circumstances; (ii) the defender must manipulate the dynamics to avoid such unmanageable situations in real-life defense operations.
Cybersecurity Dynamics: A Foundation for the Science of Cybersecurity

Shouhuai Xu

DOI: https://doi.org/10.48550/arXiv.2010.05683

2020-10-09

Cryptography and Security

Abstract:Cybersecurity Dynamics is new concept that aims to achieve the modeling, analysis, quantification, and management of cybersecurity from a holistic perspective, rather than from a building-blocks perspective. It is centered at modeling and analyzing the attack-defense interactions in cyberspace, which cause a ``natural'' phenomenon -- the evolution of the global cybersecurity state. In this Chapter, we systematically introduce and review the Cybersecurity Dynamics foundation for the Science of Cybersecurity. We review the core concepts, technical approaches, research axes, and results that have been obtained in this endeavor. We outline a research roadmap towards the ultimate research goal, including a systematic set of technical barriers.
A Novel Approach to the Behavioral Aspects of Cybersecurity

Sarah Sharifi

2023-01-23

Abstract:The Internet and cyberspace are inseparable aspects of everyone's life. Cyberspace is a concept that describes widespread, interconnected, and online digital technology. Cyberspace refers to the online world that is separate from everyday reality. Since the internet is a recent advance in human lives, there are many unknown and unpredictable aspects to it that sometimes can be catastrophic to users in financial aspects, high-tech industry, and healthcare. Cybersecurity failures are usually caused by human errors or their lack of knowledge. According to the International Business Machines Corporation (IBM) X-Force Threat Intelligence Index in 2020, around 8.5 billion records were compromised in 2019 due to failures of insiders, which is an increase of more than 200 percent compared to the compromised records in 2018. In another survey performed by the Ernst and Young Global Information Security during 2018-2019, it is reported that 34% of the organizations stated that employees who are inattentive or do not have the necessary knowledge are the principal vulnerabilities of cybersecurity, and 22% of the organizations indicated that phishing is the main threat to them. Inattentive users are one of the reasons for data breaches and cyberattacks. The National Cyber Security Centre (NCSC) in the United Kingdom observed that 23.2 million users who were victims of cybersecurity attacks used a carelessly selected password, which is 123456, as their account password. The Annual Cybersecurity Report published by Cisco in 2018 announced that phishing and spear phishing emails are the root causes of many cybersecurity attacks in recent years. Hence, enhancing the cybersecurity behaviors of both personal users and organizations can protect vulnerable users from cyber threats. Both human factors and technological aspects of cybersecurity should be addressed in organizations for a safer environment.

Human-Computer Interaction,Cryptography and Security
Securing emergent behaviour in swarm robotics

Liqun Chen,Siaw-Lynn Ng

DOI: https://doi.org/10.1016/j.jisa.2021.103047

IF: 4.96

2022-02-01

Journal of Information Security and Applications

Abstract:Swarm robotics is the study of how a large number of relatively simple robots can be designed so that a desired collective behaviour emerges from the local interactions among robots and between the robots and their environment. While many aspects of a swarm may be modelled as various types of ad hoc networks, and accordingly many aspects of security of the swarm may be achieved by conventional means, here we will focus on swarm emergent behaviour as something that most distinguishes swarm robotics from ad hoc networks. We discuss the challenges emergent behaviour poses on communications security, and by classifying a swarm by types of robots, types of communication channels, and types of adversaries, we examine what classes may be secured by traditional methods and focus on aspects that are most relevant to allowing emergent behaviour. We will examine how this can be secured by ensuring that communication is secure. We propose a simple solution using hash chains, and by modelling swarm communications using a series of random graphs, we show that this allows us to identify rogue robots with a high probability.

computer science, information systems
A Typology of Cybersecurity Behavior among Knowledge Workers

Dennik Baltuttis,Timm Teubner,Marc T.P. Adam

DOI: https://doi.org/10.1016/j.cose.2024.103741

IF: 5.105

2024-02-01

Computers & Security

Abstract:While the cybersecurity literature on behavioral factors has expanded, current countermeasures often overlook employee-specific behavioral differences, leading to generic solutions. This study addresses this gap by introducing a typology of knowledge worker cybersecurity behaviors through cluster analysis. Based on online survey data (n=264), we identify six main dimensions of cybersecurity attitude and behavior and, based on these, four behavioral cybersecurity types with distinct characteristics and demographic profiles: Naïve Greenhorns, Traditional Examiners, Flexible Mavericks, and Reliable Troupers. Contrary to common beliefs, the study found that older employees demonstrate high cybersecurity resilience, while younger ones pose a higher risk. These findings underscore the importance of tailored, human-centered cybersecurity approaches.

computer science, information systems
Cyber Security Behaviour In Organisations

Amy Ertan,Georgia Crossland,Claude Heath,David Denny,Rikke Jensen

DOI: https://doi.org/10.48550/arXiv.2004.11768

2020-04-24

Abstract:This review explores the academic and policy literature in the context of everyday cyber security in organisations. In so doing, it identifies four behavioural sets that influences how people practice cyber security. These are compliance with security policy, intergroup coordination and communication, phishing/email behaviour, and password behaviour. However, it is important to note that these are not exhaustive and they do not exist in isolation. In addition, the review explores the notion of security culture as an overarching theme that overlaps and frames the four behavioural sets. The aim of this review is therefore to provide a summary of the existing literature in the area of everyday cyber security within the social sciences, with a particular focus on organisational contexts. In doing so, it develops a series of suggestions for future research directions based on existing gaps in the literature. The review also includes a theoretical lens that will aid the understanding of existing studies and wider literatures. Where possible, the review makes recommendations for organisations in relation to everyday cyber security.

Computers and Society
The New Frontier of Cybersecurity: Emerging Threats and Innovations

Daksh Dave,Gauransh Sawhney,Pushkar Aggarwal,Nitish Silswal,Dhruv Khut

DOI: https://doi.org/10.1109/ICT60153.2023.10374044

2023-11-05

Abstract:In today's digitally interconnected world, cybersecurity threats have reached unprecedented levels, presenting a pressing concern for individuals, organizations, and governments. This study employs a qualitative research approach to comprehensively examine the diverse threats of cybersecurity and their impacts across various sectors. Four primary categories of threats are identified and analyzed, encompassing malware attacks, social engineering attacks, network vulnerabilities, and data breaches. The research delves into the consequences of these threats on individuals, organizations, and society at large. The findings reveal a range of key emerging threats in cybersecurity, including advanced persistent threats, ransomware attacks, Internet of Things (IoT) vulnerabilities, and social engineering exploits. Consequently, it is evident that emerging cybersecurity threats pose substantial risks to both organizations and individuals. The sophistication and diversity of these emerging threats necessitate a multi-layered approach to cybersecurity. This approach should include robust security measures, comprehensive employee training, and regular security audits. The implications of these emerging threats are extensive, with potential consequences such as financial loss, reputational damage, and compromised personal information. This study emphasizes the importance of implementing effective measures to mitigate these threats. It highlights the significance of using strong passwords, encryption methods, and regularly updating software to bolster cyber defenses.

Cryptography and Security,Artificial Intelligence,Computers and Society,Machine Learning
Advanced Computing and Endogenous Security

Hongchao Hu,Zhen Ling,Yuewu Wang,Qi Li,Liang Jin,Jiangxing Wu

DOI: https://doi.org/10.23919/jcc.2021.9521141

2021-01-01

China Communications

Abstract:Computing is the foundation of cyberspace, and all activities in cyberspace are built on the basis of computing. At the same time, cyberspace and its underlying infrastructure are vulnerable to a wide range of risks stemming from both physical and cyber threats and hazards. With the further expan-sion of the scope of cyberspace, e.g., information technology being increasingly integrated with physi-cal infrastructure operations, computing and security still considered as one of the least investigated and exploited regions. In the past years, significant prog-ress has been made with respect to advanced com-puting and endogenous security theories and tech-nologies, and commercial advanced computing and endogenous security devices and systems are antici-pated to become a reality in the near future.
Principles of Security: Human, Cyber, and Biological

Blake C. Stacey,Yaneer Bar-Yam

DOI: https://doi.org/10.48550/arXiv.1303.2682

2013-03-11

Cryptography and Security

Abstract:Cybersecurity attacks are a major and increasing burden to economic and social systems globally. Here we analyze the principles of security in different domains and demonstrate an architectural flaw in current cybersecurity. Cybersecurity is inherently weak because it is missing the ability to defend the overall system instead of individual computers. The current architecture enables all nodes in the computer network to communicate transparently with one another, so security would require protecting every computer in the network from all possible attacks. In contrast, other systems depend on system-wide protections. In providing conventional security, police patrol neighborhoods and the military secures borders, rather than defending each individual household. Likewise, in biology, the immune system provides security against viruses and bacteria using primarily action at the skin, membranes, and blood, rather than requiring each cell to defend itself. We propose applying these same principles to address the cybersecurity challenge. This will require: (a) Enabling pervasive distribution of self-propagating securityware and creating a developer community for such securityware, and (b) Modifying the protocols of internet routers to accommodate adaptive security software that would regulate internet traffic. The analysis of the immune system architecture provides many other principles that should be applied to cybersecurity. Among these principles is a careful interplay of detection and action that includes evolutionary improvement. However, achieving significant security gains by applying these principles depends strongly on remedying the underlying architectural limitations.
Emergent (In)Security of Multi-Cloud Environments

Morgan Reece,Theodore Lander Jr.,Sudip Mittal,Nidhi Rastogi,Josiah Dykstra,Andy Sampson

2023-11-02

Abstract:As organizations increasingly use cloud services to host their IT infrastructure, there is a need to share data among these cloud hosted services and systems. A majority of IT organizations have workloads spread across different cloud service providers, growing their multi-cloud environments. When an organization grows their multi-cloud environment, the threat vectors and vulnerabilities for their cloud systems and services grow as well. The increase in the number of attack vectors creates a challenge of how to prioritize mitigations and countermeasures to best defend a multi-cloud environment against attacks. Utilizing multiple industry standard risk analysis tools, we conducted an analysis of multi-cloud threat vectors enabling calculation and prioritization for the identified mitigations and countermeasures. The prioritizations from the analysis showed that authentication and architecture are the highest risk areas of threat vectors. Armed with this data, IT managers are able to more appropriately budget cybersecurity expenditure to implement the most impactful mitigations and countermeasures.

Cryptography and Security
Cyberspace Endogenous Safety and Security

Jiangxing Wu

DOI: https://doi.org/10.1016/j.eng.2021.05.015

IF: 12.834

2022-01-01

Engineering

Abstract:Uncertain security threats caused by vulnerabilities and backdoors are the most serious and difficult problem in cyberspace. This paper analyzes the philosophical and technical causes of the existence of so-called "dark functions" such as system vulnerabilities and backdoors, and points out that endogenous security problems cannot be completely eliminated at the theoretical and engineering levels; rather, it is necessary to develop or utilize the endogenous security functions of the system architecture itself. In addition, this paper gives a definition for and lists the main technical characteristics of endogenous safety and security in cyberspace, introduces endogenous safety and security mechanisms and characteristics based on dynamic heterogeneous redundancy (DHR) architecture, and describes the theoretical implications of a coding channel based on DHR. (c) 2021 THE AUTHOR. Published by Elsevier LTD on behalf of Chinese Academy of Engineering and Higher Education Press Limited Company. This is an open access article under the CC BY-NC-ND license (http://creativecommons.org/licenses/by-nc-nd/4.0/).
BASCPS: How does behavioral decision making impact the security of cyber-physical systems?

Mustafa Abdallah,Daniel Woods,Parinaz Naghizadeh,Issa Khalil,Timothy Cason,Shreyas Sundaram,Saurabh Bagchi

DOI: https://doi.org/10.48550/arXiv.2004.01958

2020-04-08

Abstract:We study the security of large-scale cyber-physical systems (CPS) consisting of multiple interdependent subsystems, each managed by a different defender. Defenders invest their security budgets with the goal of thwarting the spread of cyber attacks to their critical assets. We model the security investment decisions made by the defenders as a security game. While prior work has used security games to analyze such scenarios, we propose behavioral security games, in which defenders exhibit characteristics of human decision making that have been identified in behavioral economics as representing typical human cognitive biases. This is important as many of the critical security decisions in our target class of systems are made by humans. We provide empirical evidence for our behavioral model through a controlled subject experiment. We then show that behavioral decision making leads to a suboptimal pattern of resource allocation compared to non-behavioral decision making. We illustrate the effects of behavioral decision making using two representative real-world interdependent CPS. In particular, we identify the effects of the defenders' security budget availability and distribution, the degree of interdependency among defenders, and collaborative defense strategies, on the degree of suboptimality of security outcomes due to behavioral decision making. In this context, the adverse effects of behavioral decision making are most severe with moderate defense budgets. Moreover, the impact of behavioral suboptimal decision making is magnified as the degree of the interdependency between subnetworks belonging to different defenders increases. We also observe that selfish defense decisions together with behavioral decisions significantly increase security risk.

Cryptography and Security,Computer Science and Game Theory
Exploring Workers' Subjective Experiences of Habit Formation in Cybersecurity: A Qualitative Survey

Emily I M Collins,Joanne Hinds

DOI: https://doi.org/10.1089/cyber.2020.0631

Abstract:Employee behaviors remain at the center of the cybersecurity of workplaces, despite the challenges they face in doing so. Time pressures and competing demands mean that users tend to rely on habitual behaviors that often run counter to good cybersecurity practice. One possible solution may be to encourage positive habit formation. Designing such interventions, however, relies on knowledge of the perception and experience of habit formation in the context of cybersecurity. To this end, a qualitative survey containing open-ended questions was completed by 195 participants (mean age = 35.51, 53 percent female) recruited via an online participant panel. Participants were asked what cybersecurity behaviors they perform at work and how they believe any habits were prompted, formed, and maintained. Thematic analysis identified three over-arching themes: (a) forming habits unavoidably or unconsciously (some were mandated, or formed without conscious awareness), (b) consciously cultivating habits (including the roles of intrinsic motivation and external prompts), and (c) social and organizational influences (including the influence of occupational culture, social modeling, previous experiences, and information gathering practices). Based on these findings, we present guidelines for supporting workplace cybersecurity habit formation reflecting these subjective experiences, namely introducing automatic solutions, facilitating external cues, fostering interest in cybersecurity issues among employees, creating a positive cybersecurity occupational culture and highlighting positive behavior, and providing access to accessible cybersecurity information to employees. These results constitute a first step in identifying how habits can be exploited for positive cybersecurity behavior change in a way that accounts for the reliance on habitual behaviors in busy, time-pressured workplaces.
Emerging Threats in Cyberspace: Implications for National Security Policy and Healthcare Sector

Stephanie Ness,Tushar Khinvasara

DOI: https://doi.org/10.9734/jerr/2024/v26i21075

2024-01-29

Journal of Engineering Research and Reports

Abstract:Currently, the majority of economic, commercial, cultural, social, and governmental activity and contacts between countries, encompassing individuals, non-governmental organizations, and government institutions, occur in the virtual realm known as cyberspace. In recent times, numerous private enterprises and governmental institutions worldwide have encountered the issue of cyber- attacks and the peril associated with wireless communication technology. The modern society heavily relies on electronic technology, and safeguarding this data from cyber-attacks poses a formidable challenge. Cyber-attacks are intended to inflict financial harm onto companies. Cyber- attacks may serve military or political objectives in certain instances. Some examples of these damages include PC infections, knowledge breaches, data distribution service (DDS), and other attack routes. For this purpose, different companies employ diverse strategies to mitigate the harm caused by cyber-attacks. Cybersecurity monitors up-to-date information on the most recent IT data. Researchers worldwide have proposed several techniques to prevent cyber-attacks or mitigate their impact. Several approaches are currently in the operational phase, while others are still in the study phase. The objective of this study is to conduct a thorough examination and evaluation of the latest advancements in the field of cyber security, with the purpose of identifying and analyzing the problems, vulnerabilities, and strengths of the proposed methodologies. A comprehensive analysis is conducted on several forms of novel descendant attacks. The discussion revolves around conventional security frameworks, encompassing their historical context and early-generation approaches to cyber-security. Furthermore, this report presents the latest advancements and developing patterns in the field of cyber security, as well as the current problems and risks to security. The comprehensive review study offered for IT and cyber security researchers is anticipated to be beneficial.
Out to Explore the Cybersecurity Planet

Giampaolo Bella

DOI: https://doi.org/10.48550/arXiv.2112.12790

2021-12-18

Cryptography and Security

Abstract:Security ceremonies still fail despite decades of efforts by researchers and practitioners. Attacks are often a cunning amalgam of exploits for technical systems and of forms of human behaviour. For example, this is the case with the recent news headline of a large-scale attack against Electrum Bitcoin wallets, which manages to spread a malicious update of the wallet app. I therefore set out to look at things through a different lens. I make the (metaphorical) hypothesis that human ancestors arrived on Earth along with security ceremonies from a very far planet, the Cybersecurity planet. My hypothesis continues, in that studying (by huge telescopes) the surface of Cybersecurity in combination with the logical projection on that surface of what happens on Earth is beneficial for us earthlings. I have spotted four cities so far on the remote planet. Democratic City features security ceremonies that allow inhabitants to follow personal paths of practice and, for example, make errors or be driven by emotions. By contrast, security ceremonies in Dictatorial City compel inhabitants to comply, thus behaving like programmed automata. Security ceremonies in Beautiful City are so beautiful that inhabitants just love to follow them precisely. Invisible City has security ceremonies that are not perceivable, hence inhabitants feel like they never encounter any. Incidentally, we use the words "democratic" and "dictatorial" without any political connotation. A key argument I shall develop is that all cities but Democratic City address the human factor, albeit in different ways. In the light of these findings, I will also discuss security ceremonies of our planet, such as WhatsApp web login and flight boarding, and explore room for improving them based upon the current understanding of Cybersecurity.
Emerging Threats: The Latest Cybersecurity Risks and the Role of Artificial Intelligence in Enhancing Cybersecurity Defenses

Fnu Jimmy

DOI: https://doi.org/10.18535/ijsrm/v9i2.ec01

2021-02-23

Abstract:In an era marked by the relentless advancement of technology, the realm of cybersecurity confronts a relentless onslaught of increasingly sophisticated threats, presenting formidable challenges to organizations across the globe. Amidst this dynamic landscape, the pivotal role of artificial intelligence (AI) in fortifying cybersecurity defenses has ascended to unprecedented prominence. This research article undertakes a comprehensive examination of the prevailing cybersecurity risks, while also delving into the transformative potential of AI in ameliorating these perilous hazards. Through a meticulous review of extant literature and insightful case studies, the article meticulously delineates emergent cyber threats, elucidating the manifold applications of AI in the realms of threat detection, prevention, and incident response. Furthermore, this research endeavor meticulously elucidates the intricate nexus of challenges and limitations inherent within AI-powered cybersecurity systems, encompassing ethical quandaries and technical impediments. By delineating these complexities, the article endeavors to foster a nuanced understanding of the intricate interplay between AI and cybersecurity. As a culmination of this scholarly discourse, the article proffers cogent insights into prospective trajectories and pragmatic recommendations aimed at harnessing the transformative potential of AI to fortify cybersecurity protocols. This research underscores the imperative for concerted collaboration between policymakers, organizations, and cybersecurity practitioners in navigating the labyrinthine landscape of evolving cyber threats. Through judicious deployment and continual refinement of AI-driven solutions, the collective endeavor to safeguard digital ecosystems against the pernicious machinations of cyber adversaries assumes paramount significance, thereby heralding a new epoch of resilience and vigilance in the realm of cybersecurity.
Emergence Behavior Versus Physical-Like Behavior

Xiaobo Hou,Wanshan Lin,Xueting Tian,Xutong Zhao

DOI: https://doi.org/10.1142/s0218127424500548

IF: 2.45

2024-04-09

International Journal of Bifurcation and Chaos

Abstract:In this paper, we study the dynamical complexity of points with emergence behavior but without weak face behavior, especially for points without physical-like behavior in certain dynamical systems such as transitive Anosov systems. We use the tools of saturated sets to prove that these points show strong dynamical complexity in the sense of entropy, density and distributional chaos. We obtain some observations of those results related to irregular sets and level sets. These results strengthen the previous results of [Catsigeras et al., 2019; Hou et al., 2023].

mathematics, interdisciplinary applications,multidisciplinary sciences

Emergent Behavior in Cybersecurity

Event Evolution Model for Cybersecurity Event Mining in Tweet Streams

Cybersecurity Dynamics

Citizens’ Cybersecurity Behavior: Some Major Challenges

Active Cyber Defense Dynamics Exhibiting Rich Phenomena.

Cybersecurity Dynamics: A Foundation for the Science of Cybersecurity

A Novel Approach to the Behavioral Aspects of Cybersecurity

Securing emergent behaviour in swarm robotics

A Typology of Cybersecurity Behavior among Knowledge Workers

Cyber Security Behaviour In Organisations

The New Frontier of Cybersecurity: Emerging Threats and Innovations

Advanced Computing and Endogenous Security

Principles of Security: Human, Cyber, and Biological

Emergent (In)Security of Multi-Cloud Environments

Cyberspace Endogenous Safety and Security

BASCPS: How does behavioral decision making impact the security of cyber-physical systems?

Exploring Workers' Subjective Experiences of Habit Formation in Cybersecurity: A Qualitative Survey

Emerging Threats in Cyberspace: Implications for National Security Policy and Healthcare Sector

Out to Explore the Cybersecurity Planet

Emerging Threats: The Latest Cybersecurity Risks and the Role of Artificial Intelligence in Enhancing Cybersecurity Defenses

Emergence Behavior Versus Physical-Like Behavior