Search

This position paper delves into the complex interplay between proactive cyber defense mechanisms and inherent human susceptibilities. The researchers posit that as cyber systems advance in technical robustness, malicious entities progressively exploit human psychological tendencies and behavioral inconsistencies to circumvent security measures. These exploitations are not merely opportunistic but are strategic, leveraging a profound comprehension of human cognitive biases to undermine security infrastructures. The researchers argue for broadening the intellectual horizon in this domain, underscoring the imperative for a multidisciplinary methodology that amalgamates the empirical acumen of psychology, sociology, and computer science. The article asserts that the fortification of cyber defenses is contingent upon the comprehensive integration of human vulnerability assessments within cybersecurity frameworks. This position paper calls for an augmentation of scholarly research at the nexus of offensive cybersecurity and human factors, formulating defense mechanisms centered around the human element and promulgating inclusive cybersecurity policies that harmonize human and technological considerations. [ABSTRACT FROM AUTHOR]

Commercial aviation is vital to the economic health of the global economy. Commercial aviation as a global entity should be an international critical infrastructure that constantly safeguards and protects from malicious threats, including cybersecurity threat actors (Nobles, 2019). The international aviation industry needs a comprehensive cybersecurity defense plan to prevent cyber-based threats from negatively impacting civil aviation. Critical components of the global aviation systems consist of airport operations, air traffic management, ground operations, airline operations, unmanned systems, operations (Kessler, Craiger, & Haass, 2018), aviation maintenance, airport security (physical security), and cargo and logistics. The existing aviation infrastructure was designed, engineered, and implemented without forbearance on cybersecurity (Kessler, Craiger, & Haass, 2018). The lack of international cyber governance impedes the enforcement of cybersecurity policies; therefore, requiring a global-based alliance to create standards and best practices for evaluating and managing cybersecurity risks (Urban, 2017), especially in commercial aviation. [ABSTRACT FROM AUTHOR]

As organizations raced to leverage cloud computing to capitalize on its economic and flexible computing capacity, misconfiguration errors ascended to unprecedented levels. One security expert noted observing over 230 million misconfigurations daily. Cloud misconfiguration errors are problematic as malicious actors continually pursue missteps to gain unauthorized access. The complexity of cloud computing coupled with increased cloud usage and the lack of cloud expertise result in misconfiguration errors which are human errors. Leveraging the human factors analysis and classification system (HFACS) provides a framework for identifying and preventing causal pathways for misconfiguration errors. In cloud computing, practitioners can explore the linkages of the hierarchical levels and decision-making at each level that influences and enable the misconfigurations. Human errors in cybersecurity are rampant, and HFACS could provide comprehensive analyses to highlight how errors, mistakes, and violations propagate misconfiguration errors – a current blind spot in cloud computing. [ABSTRACT FROM AUTHOR]

Data shows that 12% of leaders are rated as 'very effective' at leadership. This research emphasizes the importance of understanding human behavior and its impact on leadership effectiveness, innovative work behavior (IWB), and the ability to respond to complex cyber threats, particularly in the realm of cybersecurity leadership. Emotional intelligence (EI), a key human factor, is highlighted as a crucial element that can stimulate cognitive absorption, leading to innovative work behavior and improved innovation efficiency (IE). This underscores the need for leaders to not only be technically proficient but also emotionally intelligent to effectively manage their teams and respond to cyber threats. The article also calls for a shift in leadership education to a more holistic and engaged exploration of key leadership attributes, moving beyond traditional methods that often limit understanding to a single culture or approach. This involves understanding the human factors that influence leadership styles and their effectiveness. Furthermore, the use of a literature review underscores the need for leaders to understand the human elements behind cyber threats. Overall the data suggests that leaders need a comprehensive understanding of leadership principles and an active engagement in its theories to foster innovative thinking within cybersecurity leadership. [ABSTRACT FROM AUTHOR]