Tuesday, April 15, 2025

The Intersection of know-how and human behaviour in cybersecurity

Dr. Mary Aiken stands on the forefront of cyberpsychology, exploring the intricate relationship between know-how and human behaviour.

As a professor and chair of the Division of Cyberpsychology at Capitol Know-how College in Washington D.C., and a Professor of Forensic Cyberpsychology on the College of East London, she has devoted her profession to understanding the psychological implications of our digital lives.

A extremely sought-after cybersecurity speaker, Dr Aiken shares her experience on world phases, providing distinctive insights into cyber behaviour and digital danger. We spoke together with her to delve into the evolving panorama of cyberpsychology, the challenges posed by rising applied sciences, and the way people and organisations can navigate the complexities of the digital age.

In your view, how essential is it that cybersecurity evolves to totally incorporate the human layer, and what are probably the most urgent psychological components that should now be addressed?

To start with, let’s speak about our on-line world. As cyber psychologists, folks like myself have been discussing our on-line world for the very best a part of twenty years. In truth, in 2016, NATO formally ratified our on-line world as an setting — as a website — recognising that the battles of the longer term would happen not solely on land, sea, and air, but in addition throughout laptop networks.

The US navy conceptualises our on-line world as comprising three layers. Firstly, there may be the bodily community, which incorporates the {hardware}, cables, and infrastructure. Secondly, there may be the logical community, which facilitates communication throughout these networks. And eventually, there may be the cyber persona layer—that’s us, the people.

After we speak about incorporating the human layer into the cybersecurity equation, we now have to acknowledge that we’ve had 50 to 60 years of cybersecurity, and it has been very efficient in addressing the primary two layers: the bodily and logical networks. Nonetheless, the overwhelming majority of cyberattacks as we speak are pushed by social engineering — and social engineering has way more to do with psychology than with know-how.

Consequently, we’re now seeing the emergence of a brand new sector underneath the broader umbrella of cybersecurity: the net security know-how sector, or SafetyTech. I’m proud to be one of many founding members of this sector within the UK. Our mission is to develop technological options to technology-facilitated issues — specifically dangerous and legal behaviours on-line.

To summarise, we should issue the human into the cybersecurity equation — from the attitude of customers, staff, and cyber attackers. And after we take a look at the spectrum of cyber risk actors — from state-sponsored to state-condoned, from hacktivists to activists, from organised cybercrime to classy risk teams — we want options that aren’t solely technically strong and resilient, but in addition account for human psychological resilience.

We would like our knowledge programs and networks to be safe, however equally, we want the folks working these programs to be psychologically protected, strong, and resilient. That’s how we will ship on what I name 360-degree resilience.

As one of many foremost specialists in cyber psychology, how does the science underpinning this subject inform your public talking, notably when participating with sectors grappling with tech-driven behavioural change?

In cyber psychology, we research particular results — for instance, the net disinhibition impact — which explains why folks typically behave in methods on-line that they might by no means think about in the true world. It’s a key behavioural driver in digital environments.

We additionally discover the ability of on-line anonymity, which might be useful in some contexts however also can act like a ‘superhuman energy of invisibility’. And, as with all powers, it comes with duty — one thing not all the time exercised effectively by people.

In fact, we additionally observe constructive on-line behaviours, corresponding to altruism, seen in actions like crowdsourced fundraising. The basic precept is that human behaviour modifications in on-line environments, and understanding the affect of those behavioural shifts is important.

By means of my talking engagements, I’ve the privilege of addressing a variety of sectors — know-how, cybersecurity, infosec, monetary companies, schooling, e-commerce, and healthcare. All of those industries profit from deeper insights into how know-how influences human behaviour, each from the consumer and operator views.

My analysis spans numerous areas, together with cyberchondria — a type of well being nervousness that manifests on-line. Many people have skilled this: a headache shortly spirals into Googling signs, resulting in panic over critical situations like mind tumours.

One other current space of focus is cyber fraud. Within the UK, laws such because the On-line Security Act is geared toward addressing this type of cyber-enabled criminality. I’ve contributed to quite a few data campaigns that concentrate on one in every of my key areas of experience: cyber behavioural profiling.

Many campaigns inform folks, “Don’t click on the hyperlink.” I’m going a step additional — I analyse the semantics of phishing messages, breaking down how attackers manipulate language and psychology to compel customers to behave. Understanding the emotional and cognitive triggers that cybercriminals exploit helps us higher educate the general public and defend towards such assaults.

By way of speak subjects, I cowl a broad spectrum — from human components in cybersecurity to cyber behavioural profiling, and more and more, the psychology of AI.

With the fast rise of generative AI and different superior applied sciences, how should stakeholders throughout trade and authorities recalibrate their pondering to successfully handle each danger and alternative?

In terms of applied sciences like AI, we’ve seen many false dawns — in addition to quite a lot of ethical panics. Take the emergence of ChatGPT, as an example. Individuals grew to become excited by the novelty of chatbots, however in fact, chatbots have been round for many years.

The primary chatbot, Eliza, was developed within the Nineteen Sixties. She was modelled on Rogerian psychology and was extremely efficient at eliciting data. When she requested questions like “How are you?” and adopted up with “Inform me extra about your day,” folks started sharing deeply private tales. The response was so robust that the programme was shut down pretty shortly — its inventor was reportedly horrified by how a lot folks disclosed.

Within the Nineties, I had the pleasure of working with one other chatbot, Jabberwacky, which was developed by a colleague of mine. It was an excellent and progressive piece of know-how. What we’re witnessing now’s the continued evolution of this house.

As for the widespread concern that AI will replicate human intelligence and render us out of date, I stay sceptical. As a behavioural scientist, I’d level out that we don’t but absolutely perceive how the human mind works. The concept that we will replicate or change one thing we don’t absolutely comprehend is, to me, a flawed premise.

As an alternative of specializing in ‘synthetic intelligence’, I advocate for a distinct strategy: IIA (Intelligence Augmentation). This idea, impressed by Licklider’s Fifties work Man-Laptop Symbiosis, proposes a mannequin by which human and machine intelligence work symbiotically.

With IIA, we maintain the human on the centre of the method. That, I consider, is how we must always body our engagement with AI and machine studying – specializing in augmentation, not alternative.

Trying forward, there are undoubtedly thrilling and important modifications on the horizon. I’m notably within the convergence of quantum computing, machine studying, and AI. That mixture often is the level at which we actually start to imitate points of human intelligence.

In delivering insights throughout world establishments, from NATO to the UN, what core message or shift in mindset do you most hope audiences will stroll away with after listening to you communicate?

As one of many world’s main specialists in cyber psychology, I’ve had the honour of being invited to talk at high-level boards all over the world — from the White Home to NATO, from the United Nations to INTERPOL.

By way of conferences, I’ve spoken at gatherings throughout the spectrum — cybersecurity, infosec, healthtech, fintech, regtech, edtech, in addition to coverage and policing boards. This breadth and depth replicate the common relevance of cyber psychology in as we speak’s digital world.

My function is to equip audiences with the information, instruments, and skillsets wanted to confront the complicated challenges that emerge on the intersection of people and know-how.

I assist folks assume otherwise — empowering them to design and deploy technology-based options to technology-facilitated issues, together with dangerous and legal on-line behaviours.

Finally, my aim is to make folks extra knowledgeable, extra assured, and higher ready to have interaction with know-how in a means that’s protected, moral, and efficient.

And most significantly, I goal to encourage collaboration, as a result of we’re all working on this shared setting of our on-line world. If we’re to make it safer and safer, it is going to take collective duty and world cooperation.

Photograph by Mostafa Saeed on Unsplash

This interview with Dr Mary Aiken was carried out by Mark Matthews.   

Wish to be taught extra about cybersecurity and the cloud from trade leaders? Try Cyber Safety & Cloud Expo going down in Amsterdam, California, and London.

Discover different upcoming enterprise know-how occasions and webinars powered by TechForge right here.

Related Articles

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Latest Articles