{"title":"通过以人为本的网络安全解决方案增强数字生态系统的弹性","authors":"Zahir Tari;Redowan Mahmud","doi":"10.1109/TEM.2025.3606637","DOIUrl":null,"url":null,"abstract":"As personal, social, and economic activities increasingly shift online, the underlying digital ecosystems are becoming more complex and susceptible to cyberattacks. While conventional cybersecurity solutions often target technical threats, they frequently overlook the human element. Human perceptions, behaviours, and decisions significantly affect system security, yet most current approaches fail to address these factors adequately. This paper fills that gap by introducing a system that interprets human-related cybersecurity data. It integrates multiple data types, including user activity logs and behavioural indicators, with a structured classification method to assess user-related risks more effectively. A reference model is also proposed in this work, combining zero-trust security (where no user or device is inherently trusted) with an adaptive trust framework that responds to individual user profiles. The system is evaluated against established machine learning methods, such as support vector machines and random forests, using a publicly available dataset that simulates both benign and malicious activity. We assess its performance in both risk classification and dimensionality reduction, reporting standard metrics such as precision, recall, and F1-score. Results indicate an 11% improvement over baseline models. Beyond technical validation, we conducted a user study to evaluate usability and user sentiment. Participants answered rating-scale and open-ended questions. Quantitative feedback highlighted improved satisfaction and usability, while qualitative responses were analysed for sentiment, positive, neutral, or negative. A 15% increase in agreement with user-friendly security practices was observed. These findings suggest that integrating human-context data with adaptive security frameworks enhances both technical efficacy and user alignment in cybersecurity systems.","PeriodicalId":55009,"journal":{"name":"IEEE Transactions on Engineering Management","volume":"72 ","pages":"3892-3908"},"PeriodicalIF":5.2000,"publicationDate":"2025-09-08","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"Augmenting Digital Ecosystem Resilience Through Human-Centric Cybersecurity Solutions\",\"authors\":\"Zahir Tari;Redowan Mahmud\",\"doi\":\"10.1109/TEM.2025.3606637\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"As personal, social, and economic activities increasingly shift online, the underlying digital ecosystems are becoming more complex and susceptible to cyberattacks. While conventional cybersecurity solutions often target technical threats, they frequently overlook the human element. Human perceptions, behaviours, and decisions significantly affect system security, yet most current approaches fail to address these factors adequately. This paper fills that gap by introducing a system that interprets human-related cybersecurity data. It integrates multiple data types, including user activity logs and behavioural indicators, with a structured classification method to assess user-related risks more effectively. A reference model is also proposed in this work, combining zero-trust security (where no user or device is inherently trusted) with an adaptive trust framework that responds to individual user profiles. The system is evaluated against established machine learning methods, such as support vector machines and random forests, using a publicly available dataset that simulates both benign and malicious activity. We assess its performance in both risk classification and dimensionality reduction, reporting standard metrics such as precision, recall, and F1-score. Results indicate an 11% improvement over baseline models. Beyond technical validation, we conducted a user study to evaluate usability and user sentiment. Participants answered rating-scale and open-ended questions. Quantitative feedback highlighted improved satisfaction and usability, while qualitative responses were analysed for sentiment, positive, neutral, or negative. A 15% increase in agreement with user-friendly security practices was observed. These findings suggest that integrating human-context data with adaptive security frameworks enhances both technical efficacy and user alignment in cybersecurity systems.\",\"PeriodicalId\":55009,\"journal\":{\"name\":\"IEEE Transactions on Engineering Management\",\"volume\":\"72 \",\"pages\":\"3892-3908\"},\"PeriodicalIF\":5.2000,\"publicationDate\":\"2025-09-08\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"IEEE Transactions on Engineering Management\",\"FirstCategoryId\":\"91\",\"ListUrlMain\":\"https://ieeexplore.ieee.org/document/11153681/\",\"RegionNum\":3,\"RegionCategory\":\"管理学\",\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"Q1\",\"JCRName\":\"BUSINESS\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"IEEE Transactions on Engineering Management","FirstCategoryId":"91","ListUrlMain":"https://ieeexplore.ieee.org/document/11153681/","RegionNum":3,"RegionCategory":"管理学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q1","JCRName":"BUSINESS","Score":null,"Total":0}
Augmenting Digital Ecosystem Resilience Through Human-Centric Cybersecurity Solutions
As personal, social, and economic activities increasingly shift online, the underlying digital ecosystems are becoming more complex and susceptible to cyberattacks. While conventional cybersecurity solutions often target technical threats, they frequently overlook the human element. Human perceptions, behaviours, and decisions significantly affect system security, yet most current approaches fail to address these factors adequately. This paper fills that gap by introducing a system that interprets human-related cybersecurity data. It integrates multiple data types, including user activity logs and behavioural indicators, with a structured classification method to assess user-related risks more effectively. A reference model is also proposed in this work, combining zero-trust security (where no user or device is inherently trusted) with an adaptive trust framework that responds to individual user profiles. The system is evaluated against established machine learning methods, such as support vector machines and random forests, using a publicly available dataset that simulates both benign and malicious activity. We assess its performance in both risk classification and dimensionality reduction, reporting standard metrics such as precision, recall, and F1-score. Results indicate an 11% improvement over baseline models. Beyond technical validation, we conducted a user study to evaluate usability and user sentiment. Participants answered rating-scale and open-ended questions. Quantitative feedback highlighted improved satisfaction and usability, while qualitative responses were analysed for sentiment, positive, neutral, or negative. A 15% increase in agreement with user-friendly security practices was observed. These findings suggest that integrating human-context data with adaptive security frameworks enhances both technical efficacy and user alignment in cybersecurity systems.
期刊介绍:
Management of technical functions such as research, development, and engineering in industry, government, university, and other settings. Emphasis is on studies carried on within an organization to help in decision making or policy formation for RD&E.