Neuroergonomic Approaches to Understanding and Improving Communication of Recognized Cyber Threat Situations

Abstract

Cyber threat situations entail high-stake decision-making processes both within organizations and between the affected organization and external entities. During cyber threat situations, information is shared between individuals tasked with detecting and analyzing cyber threats (cyber operators) and the individuals tasked with making decisions based on receiving that information. This communication often entails technical complexity and is subject to challenges including time pressure, interdisciplinary factors, and frequently an insufficient information basis. These challenges may have a variety of implications for cyber defense decision-making and more research is needed. Previous research has suggested that there is not enough focus on the role cognition plays in the performance of cyber operators. With cyber threats increasingly challenging the security of digital infrastructures, understanding the cognitive processes underlying human communication becomes crucial. Approaching cognition from the perspective of neuroscience may uncover methodologies that are currently unexplored. This dissertation delves into the application of neuroergonomic approaches to enhance human-to-human communication during cyber threat situations, presenting a theoretical framework grounded in neuroscience findings. The dissertation includes three foundational studies on the dynamics of team communication and situational awareness in cyber defense settings. The findings highlight the significance of neurophysiological indicators of activity in structures that participate in coordinating cognitive processes and tools that facilitate multisensory integration of cyber threat information as potential influencers of team communication effectiveness and metacognitive situational awareness. A key innovation of this thesis is the exploration of mixed reality technologies in facilitating dyadic team communication and enhancing cyber situational awareness. By comparing 3D mixed reality with traditional 2D representations of network attacks, the study indicates that mixed reality technology can lead to improved communication and awareness among cyber defense teams, although the impact on decision-making requires further exploration. The dissertation concludes with a critical discussion on the broader implications of these findings for cybersecurity practices and makes suggestions for future research efforts to validate findings. By bridging the gap between neuroscience and cybersecurity, this dissertation lays the groundwork for developing more resilient defenses against cyber threats.