Motivation-based Attacker Modelling for Cyber Risk Management: A Quantitative Content Analysis and a Natural Experiment
محتوى المقال
الملخص
Cyber-attacks have a tremendous impact on worldwide economic performance. Hence, it is vitally important to implement effective risk management for different cyber-attacks, which calls for profound attacker models. However, cyber risk modelling based on attacker models seems to be restricted to overly simplified models. This hinders the understanding of cyber risks and represents a heavy burden for efficient cyber risk management. This work aims to forward scientific research in this field by employing a multi-method approach based on a quantitative content analysis of scientific literature and a natural experiment. Our work gives evidence for the oversimplified modelling of attacker motivational patterns. The quantitative content analysis gives evidence for a broad and established misunderstanding of attackers as being illicitly malicious. The results of the natural experiment substantiate the findings of the content analysis. We thereby contribute to the improvement of attacker modelling, which can be considered a necessary prerequisite for effective cyber risk management.
الكلمات المفتاحية
Information security، Threat modelling، Quantitative literature analysis، Multi-methods، Natural experiment
التنزيلات
المراجع
A. Elitzur, R. Puzis, and P. Zilberman, “Attack Hypothesis Generation,” in 2019 European Intell. Secur. Inf. Conf. (EISIC), Oulu, Finland, pp. 40-47, doi: 10.1109/EISIC49498.2019.9108886.
V. Mavroeidis and S. Bromander, “Cyber threat intelligence model: An evaluation of taxonomies, sharing standards, and ontologies within cyber threat intelligence,” in 2017 European Intell. Secur. Inf. Conf. (EISIC), Athens, Greece, pp. 91-98, doi: 10.1109/EISIC.2017.20.
R. Stillions, “The DML Model”, 2014, [Online]. Available: http://ryanstillions.blogspot.com/2014/0 4/the-dml-model 21.html
J. Lickiewicz, “Cyber Crime psychology-proposal of an offender psychological profile,” Probl. Forensic Sci., vol. 87 (LXXXVII), pp. 239-252, 2011.
L. J. Stalans and C. M. Donner, “Explaining Why Cybercrime Occurs: Criminological and Psychological Theories,” in Cyber Criminology, H. Jahankhani, Ed., in Advanced Sciences and Technologies for Security Applications, Cham, Switzerland: Springer, 2018, pp. 25-45.
S. M. Mandelcorn, “An explanatory model of motivation for cyber-attacks drawn from criminological theories” Ph.D. dissertation, Mech. Eng., Maryland Univ., MD, USA, 2013.
L. Allodi, F. Massacci and J. M. Williams, “The work-avers cyber attacker model: Theory and evidence from two million attack signatures,” June 2017. [Online]. Available: https://papers.ssrn.com/sol3/papers.cfm?abstract_id=2862299
B. Thomson, “The COVID-19 pandemic: A global natural experiment,” Circulation, vol. 142, no. 1, Apr. 23, 2020, doi: 10.1161/CIRCULATIONAHA.120.047538.
X. Li, "A Review of Motivations of Illegal Cyber Activities," Kriminologija & socijalna integracija, vol. 25, no. 1, pp. 110-126, 2017, doi: 10.31299/ksi.25.1.4.
A. Warikoo, “Proposed Methodology for Cyber Criminal Profiling,” Inf. Secur. J., vol. 23, no. 6, pp. 172-178, Oct. 22, 2014, doi: 10.1080/19393555.2014.931491.
C. S. Fötinger and W. Ziegler, “Understanding a Hacker’s Mind–a psychological insight into the hijacking of identities,” Danube-University, Krems, Austria, 2004.
H. Woo, Y. Kim and J. Dominick, “Hackers: Militants or merry pranksters? A content analysis of defaced web pages,” Media Psychol., vol. 6, no. 1, pp. 63-82, Nov. 17, 2009, doi: 10.1207/s1532785xmep0601_3.
Thycotic Software Ltd., “Thycotic Black Hat 2014 Hacker Survey Executive Report,” 2014.
R. Madarie, “Hackers' Motivations: Testing Schwartz's Theory of Motivational Types of Values in a Sample of Hackers,” Int. J. Cyber Criminol., vol. 11, no. 1, pp. 78-97, 2017, doi: 10.5281/zenodo.495773.
R. Van Holsteijn, “The Motivation of Attackers in Attack Tree Analysis,” M.S. thesis, Inf. Commun. Technol., TU Delft Univ., Delf, Netherlands, 2015.
M. R. Moosavi, J. M. Fazaeli, M. H. Sadreddini, and J. M. Zolghadri, “Entropy Based Fuzzy Rule Weighting for Hierarchical Intrusion Detection,” Iran. J. Fuzzy Syst., vol. 11, no. 3, pp. 77-94, 2014, doi: 10.22111/IJFS.2014.1571.
V. Brandstätter, J. Schüler, R. M. Puca, and L. Lozo, Motivation und Emotion. Berline, Germany: Springer, 2017.
D. C. McClelland, J. W. Atkinson, R. A. Clark and E. L. Lowell, The Achievement Motive. New York, NY, USA: Appleton-Century-Crofts, Inc, 1953.
H. A. Murray, Exploration in personality. New York, NY, USA: Oxford Univ. Press, 1938.
J.W. Atkinson, “Motivational determinants of risk-taking behavior,” Psychol. Rev., vol. 64, no. 6 Pt. 1, pp. 359–372, 1957, doi: 10.1037/h0043445.
O. C. Schultheiss, “Implicit motives,” in Handbook of Personality: Theory and Research, in O. P. John, and R. W. Robins, New York, NY, USA: The Guilford Press, 2008, pp. 385-410.
R. Baumeister, and M. R. Leary, “The need to belong: Desire for interpersonal attachments as a fundamental human motivation,” Psychol. Bull., vol. 117, no. 3, pp. 497–529, 1995, doi: 10.1037/0033-2909.117.3.497.
B. Landreth, Out of the Inner Circle: A Hacker's Guide to Computer Security, Bellevue, WA, USA: Microsoft Press, 1985.
R. Hollinger, “Computer hackers follow a guttman-like progression”, in Social Sciences Review, 72, 1988, pp. 199-200.
N. Chantler, Profile of a Computer Hacker, FL, USA: InterPact Press, 1997.
R. Barber, “Hackers profiled—who are they and what are their motivations?,” Comput. Fraud Secur., vol. 2001, no. 2, pp. 14-17, Feb. 2001, doi: 10.1016/S1361-3723(01)02017-6.
A. D. Smith and W.T. Rupp, “Issues in cybersecurity; understanding the potential risks associated with hackers/crackers,” Inf. Manag. Comput. Secur., vol. 10, no. 4, pp. 178-183, 2002, doi: 10.1108/09685220210436976.
T. Casey, “Threat Agent Library Helps Identify Information Security Risks,” Intel Corporation, USA, 2007.
T. Casey, “Understanding Cyberthreat Motivations to Improve Defense,” Intel Corporation, USA, 2015.
M. K. Rogers, “A two-dimensional circumplex approach to the development of a hacker taxonomy,” Digit. Investig., vol. 3, no. 2, pp. 97-102, June 2006, doi: 10.1016/j.diin.2006.03.001.
J. Bässmann, “Täter im Bereich Cybercrime-Eine Literaturanalyse,” March 2, 2017. [Online]. Available: https://www.bka.de/SharedDocs/Downloads/DE/Publikationen/Publikationsreihen/Forschungsergebnisse/2015TaeterImBereichCybercrime.html
S. Barnum, “Standardizing cyber threat intelligence information with the Structured Threat Information eXpression (STIX),” Mitre Corporation, McLean, VA, USA, Jan. 2012. [Online]. Available: https://www.mitre.org/sites/default/files/publications/stix.pdf
J. Wiggen, “The impact of COVID-19 on cyber crime and state-sponsored cyber activities,” Konrad-Adenauer-Stiftung, Berlin, Germany, No 391/June 2020, 2020.
K. Okereafor and O. Adebola, “Tackling the Cybersecurity impacts of the coronavirus outbreak as a challenge to internet safety,” Int. J. IT Eng., vol. 8, no. 2, pp. 1-14, Feb. 16, 2020.
Interpol, “Global Landscape on Covid-19 cyberthreat,” Apr. 2020. [Online]. Available: https://www.interpol.int/en/Crimes/Cybercrime/COVID-19-cyberthreats
Interpol, “Cybercrime: Covid-19 impact,” INTERPOL General Secretariat, Lyon, France, 2020. [Online]. Available: https://www.interpol.int/content/download/15526/file/COVID-19%20Cybercrime%20Analysis%20Report-%20August%202020.pdf
R. Chiesa, S. Ducci, and S. Ciappi, Profiling hackers, Boca Raton, FL, USA: CRC Press, 2008.
T. Jordan and P. Taylor, “A sociology of hackers,” Sociol. Rev., vol. 46, no. 4, pp. 757-780, Nov. 1, 1998, doi: 10.1111/1467-954X.00139.
M. Bock, Kriminologie: für Studium und Praxis, Munich, Germany: Vahlen Franz GmbH, 2017.
R. Titiunik, “Natural experiments,” arXiv:2002.00202, Feb. 2020, [Online]. Available: https://arxiv.org/abs/2002.00202.
تفاصيل المقال
هذا العمل مرخص بموجب Creative Commons Attribution-NonCommercial 4.0 International License.