Risk Psychology & Cyber-Attack Tactics

2025-10-23

AI Summary

This study investigates whether individual cognitive traits predict cyberattack behavior. Using red-team operation data from cybersecurity experts in simulated enterprise networks—integrated with psychometric assessments and tokenized attack action logs—we construct a multilevel mixed-effects Poisson regression model (with technical usage frequency nested within participants) to examine how cognitive attributes influence attack technique selection. Results demonstrate significant heterogeneity in the predictive power of cognitive differences across distinct attack techniques; notably, cognitive traits explain variance beyond that accounted for by experience and training. Specific dimensions—including cognitive flexibility and risk preference—robustly predict the adoption of high-stealth or high-complexity attack techniques. This work provides the first empirical evidence of micro-level cognitive mechanisms exerting a dominant influence on cyberattack decision-making. It establishes a foundational theoretical and methodological basis for developing cognition-informed active defense strategies and cognitive threat profiling techniques.

Technology Category

Cognitive Modeling & Cognitive Systems: Simulating Human BehaviorComputer Vision: Adversarial Attacks & RobustnessGame Theory and Economic Paradigms: Adversarial Learning

Application Category

User Modeling, Personalization and Recommendation: Attacks and countermeasures in recommendation systemsEconomics, Online Markets and Human Computation: Trust and reliance of crowd workers and data experts on GenAISecurity and Privacy: Large-scale security measurements

Abstract

We examine whether measured cognitive processes predict cyber-attack behavior. We analyzed data that included psychometric scale responses and labeled attack behaviors from cybersecurity professionals who conducted red-team operations against a simulated enterprise network. We employed multilevel mixed-effects Poisson regression with technique counts nested within participants to test whether cognitive processes predicted technique-specific usage. The scales significantly predicted technique use, but effects varied by technique rather than operating uniformly. Neither expertise level nor experimental treatment condition significantly predicted technique patterns, indicating that cognitive processes may be stronger drivers of technique selection than training or experience. These findings demonstrate that individual cognitive differences shape cyber-attack behavior and support the development of psychology-informed defense strategies.

Problem

• Cognitive processes predict cyber-attack technique selection
• Psychological factors outweigh training in attack behavior
• Individual cognitive differences shape cybersecurity attack strategies

Innovation

• Used multilevel mixed-effects Poisson regression analysis
• Linked cognitive processes to cyber-attack technique selection
• Found psychology stronger predictor than training or experience