Doing cybersecurity at home: A human-centred approach for mitigating attacks in AI-enabled home devices

IF 4.8 2区计算机科学 Q1 COMPUTER SCIENCE, INFORMATION SYSTEMS

Computers & Security Pub Date : 2024-09-19 DOI:10.1016/j.cose.2024.104112

Asimina Vasalou , Laura Benton , Ana Serta , Andrea Gauthier , Ceylan Besevli , Sarah Turner , Rea Gill , Rachael Payler , Etienne Roesch , Kevin McAreavey , Kim Bauters , Weiru Liu , Hsueh-Ju Chen , Dennis Ivory , Manos Panaousis , Georgios Loukas

{"title":"Doing cybersecurity at home: A human-centred approach for mitigating attacks in AI-enabled home devices","authors":"Asimina Vasalou , Laura Benton , Ana Serta , Andrea Gauthier , Ceylan Besevli , Sarah Turner , Rea Gill , Rachael Payler , Etienne Roesch , Kevin McAreavey , Kim Bauters , Weiru Liu , Hsueh-Ju Chen , Dennis Ivory , Manos Panaousis , Georgios Loukas","doi":"10.1016/j.cose.2024.104112","DOIUrl":null,"url":null,"abstract":"<div><div>AI-enabled devices are increasingly introduced in the home context and cyber-attacks targeting their AI component are becoming more frequent. Moving away from seeing the user as the problem to recognising the user as part of the solution, our research reports on a novel cybersecurity intervention (comprising Explainable AI features, assisted remediation) designed to support users to identify, diagnose and mitigate cyber-attacks on the AI component of their smart devices. We carried out a case study of a bespoke smart heating device inclusive of this intervention and conducted fieldwork with ten households who experienced simulated integrity cyber-attacks over a month. Our research contributes an understanding of how to design AI-enabled devices and their ecosystems to support users to perceive integrity cyber-attacks, offering new considerations for intervention design that exploits multimodal indicators and supports users to troubleshoot themselves the causes as well as actions of cyber-attacks. Contributing to the growing area of human-centred cybersecurity, we evidence the distinctive challenges users face when evaluating integrity attacks on the AI component in the home context.</div></div>","PeriodicalId":51004,"journal":{"name":"Computers & Security","volume":"148 ","pages":"Article 104112"},"PeriodicalIF":4.8000,"publicationDate":"2024-09-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://www.sciencedirect.com/science/article/pii/S0167404824004176/pdfft?md5=5fa09d1b930abf5d2979032947ec3d60&pid=1-s2.0-S0167404824004176-main.pdf","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Computers & Security","FirstCategoryId":"94","ListUrlMain":"https://www.sciencedirect.com/science/article/pii/S0167404824004176","RegionNum":2,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q1","JCRName":"COMPUTER SCIENCE, INFORMATION SYSTEMS","Score":null,"Total":0}

引用次数: 0

Abstract

AI-enabled devices are increasingly introduced in the home context and cyber-attacks targeting their AI component are becoming more frequent. Moving away from seeing the user as the problem to recognising the user as part of the solution, our research reports on a novel cybersecurity intervention (comprising Explainable AI features, assisted remediation) designed to support users to identify, diagnose and mitigate cyber-attacks on the AI component of their smart devices. We carried out a case study of a bespoke smart heating device inclusive of this intervention and conducted fieldwork with ten households who experienced simulated integrity cyber-attacks over a month. Our research contributes an understanding of how to design AI-enabled devices and their ecosystems to support users to perceive integrity cyber-attacks, offering new considerations for intervention design that exploits multimodal indicators and supports users to troubleshoot themselves the causes as well as actions of cyber-attacks. Contributing to the growing area of human-centred cybersecurity, we evidence the distinctive challenges users face when evaluating integrity attacks on the AI component in the home context.

查看原文本刊更多论文

在家中实现网络安全：以人为本，减轻人工智能家用设备受到的攻击

人工智能设备越来越多地被引入家庭环境，针对其人工智能组件的网络攻击也越来越频繁。我们的研究报告介绍了一种新型网络安全干预措施（包括可解释的人工智能功能和辅助补救措施），旨在支持用户识别、诊断和缓解针对其智能设备人工智能组件的网络攻击。我们对包含这一干预措施的定制智能供暖设备进行了案例研究，并对在一个月内经历了模拟完整性网络攻击的十户家庭进行了实地调查。我们的研究有助于理解如何设计人工智能设备及其生态系统，以支持用户感知完整性网络攻击，为利用多模态指标的干预设计提供新的考虑因素，并支持用户自行排除网络攻击的原因和行动。我们证明了用户在评估家庭环境中对人工智能组件的完整性攻击时所面临的独特挑战，为日益增长的以人为本的网络安全领域做出了贡献。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文求助全文

来源期刊

Computers & Security 工程技术-计算机：信息系统

CiteScore

12.40

自引率

7.10%

发文量

365

审稿时长

10.7 months

期刊介绍： Computers & Security is the most respected technical journal in the IT security field. With its high-profile editorial board and informative regular features and columns, the journal is essential reading for IT security professionals around the world. Computers & Security provides you with a unique blend of leading edge research and sound practical management advice. It is aimed at the professional involved with computer security, audit, control and data integrity in all sectors - industry, commerce and academia. Recognized worldwide as THE primary source of reference for applied research and technical expertise it is your first step to fully secure systems.