Human behaviour as an aspect of cybersecurity assurance

Evans, Mark; Maglaras, Leandros A.; He, Ying; Janicke, Helge

Abstract

There continue to be numerous breaches publicised pertaining to cybersecurity despite security practices being applied within industry for many years. This paper is intended to be the first in a number of papers as research into cybersecurity assurance processes. This paper is compiled based on current research related to cybersecurity assurance and the impact of the human element on it. The objective of this work is to identify elements of cybersecurity that would benefit from further research and development based on the literature review findings. The results outlined in this paper present a need for the cybersecurity field to look in to established industry areas to benefit from effective practices such as human reliability assessment, along with improved methods of validation such as statistical quality control in order to obtain true assurance. The paper proposes the development of a framework that will be based upon defined and repeatable quantification, specifically relating to the range of human aspect tasks that provide or are intended not to negatively affect cybersecurity assurance.

Citation

Evans, M., Maglaras, L. A., He, Y., & Janicke, H. (2016). Human behaviour as an aspect of cybersecurity assurance. Security and Communication Networks, 9(17), 4667-4679. https://doi.org/10.1002/sec.1657

• Journal Article Type: Article
• Acceptance Date: Jul 29, 2016
• Online Publication Date: Oct 20, 2016
• Publication Date: Nov 25, 2016
• Deposit Date: Dec 8, 2022
• Journal: Security and Communication Networks
• Print ISSN: 1939-0114
• Electronic ISSN: 1939-0122
• Publisher: Wiley
• Peer Reviewed: Peer Reviewed
• Volume: 9
• Issue: 17
• Pages: 4667-4679
• DOI: https://doi.org/10.1002/sec.1657
• Keywords: cybersecurity assurance, information security management, human factors, human reliability assesment
• Public URL: http://researchrepository.napier.ac.uk/Output/2969577