Redefining the Approach to Cybersecurity

Abstract

One of the most critical issues in cybersecurity is represented by social engineering attacks. These threats have been known for years, but it is very difficult to handle them effectively, because they are strictly related to human nature. Social engineering is not just a phishing email; indeed, it is possible to distinguish several forms of attack which combine different elements, from human to social to physical and technological. According to a psychological point of view, social engineering is a powerful means of gaining information exploiting individuals' weaknesses. Moreover, due to the mechanisms of persuasion, widely studied in literature, it is easy to imagine how complicated the management of this threat is. Appropriate training of employees, especially of key roles of the company, can be an effective antidote to social engineering. Given the current scenario and the future perspective in cybersecurity, it is clear that the approach used to manage cybersecurity requires a radical change. Currently, the preferred cybersecurity strategy is still based on technological solutions, without brilliant results, since cyberthreats keep growing. Many are convinced that Artificial Intelligence (AI) will be an opportunity for managing cybersecurity; whether true or not, it is however evident that AI has also the power to generate new threats and to strengthen the existing ones. Therefore, we should be very prudent when technologies are presented as a miracle solution for cybersecurity problems. The starting point is that technology has to be deployed under full human control. Then, critical thinking is needed to develop alternatives to improve the current approach to cybersecurity. In short, we need to develop a multidisciplinary vision of cybersecurity, involving other disciplines and assuming different perspectives.

CyberGenomics: Application of Behavioral Genetics in Cybersecurity

“…Prevention against the attacks is the best strategy in CS. Furthermore, to understand criminal behavior, it is not enough to focus on technology [ 47 ]. Moreover, the human factor should be seen as a part of the solution, not as a problem [ 48 ].…”

Organizational cybersecurity readiness in the ICT sector: a quanti-qualitative assessment

“…Although these are the major concepts defining cybersecurity, we focus on an additional set of organizational elements. According to Corradini (2020), there is a strong need to improve the current approach to cybersecurity via critical thinking and a multidisciplinary concept of this phenomenon. Because cybersecurity goes beyond the detection of technological impacts and involves all the dimensions of an organization, a new approach now involves the management and organizational area (Tejay and Klein, 2021).…”

Increasing Cybercrime Since the Pandemic: Concerns for Psychiatry

“…Falling for a scam involves errors in decision-making, and the spammers’ goal is to create situations that increase the likelihood of errors in judgment [ 82 ]. Spammers make their offers look like they come from official institutions or legitimate businesses that people routinely trust [ 82 ], and use persuasion principles found to be effective in legitimate emails [ 83 , 84 ].…”

“…Humans often place inappropriate levels of trust in automated systems [ 91 ]. Research in cybersecurity is shifting from a primary focus on technology to recognize the central importance of human behavior, social, and cultural factors [ 2 , 83 ]. Since the focus of most attacks is on human vulnerabilities, it is critical to understand how humans routinely interface with technology, including cybersecurity products.…”