Tebliğ Sunumu,
Client Cyber Threat Risk Management Model,
World Conference on Technology, Innovation and Entrepreneurship, İstanbul, Mayıs 2016
Abstract
The proposed model aims to classify cyber risk and identify the at risk users. Most of the cyber attacks are successful due to human behavior. We believe using the word human error is not correct. Cyber attacks are build in a way that is most according to human behavior of the target. Best examples are the phishing attacks. For example an e-mail send to an acquisition department with a simple text stating, “invoice attached” targets the everyday routine of that personnel. So, his/her behavior caused by repetition will be to click on the attached file. Due to the file being a malware, clicking on the file was an error. But the cause of the error is human behavior. Thus, the real cause of the success of the attack is human behavior. Therefore, achieving high fidelity model will goes through modeling human cyber attack interaction. We believe there is certain characteristic behaviors that can protect the client against some cyber attacks, as well as certain behaviors that expose the users to cyber attacks. Education, computer literacy and age differences are also important factors on human computer interaction. All these factors needs to be accounted in the model. Therefore model will include sub sets of human behaviors interacting with cyber treads, as well as human characteristics. In order to tie cyber attacks with sub sets of human behavior, a questioner will be used. Sub set of behaviors will be given to end users. Participants will choose sub sets of behaviors they display. Then they will answer questions regarding they cyber attacks that they were exposed.