Individual cognitive security awareness assessment method based on questionnaire survey

Abstract

The invention discloses an individual cognitive security awareness assessment method based on questionnaire surveys, and belongs to the field of network space security. The method specifically comprises the following steps: firstly, constructing an answer questionnaire, and adjusting rationality of the questionnaire through internal and external reliability; then selecting a plurality of users to extract cognitive attributes, building a cognitive attribute association graph according to hierarchical relationships, and selecting sub-graphs as ideal mastering modes; filling in questionnaire data by each actual tested user, mapping answer results to a rule space model (RSM), and obtaining three ideal mastering modes closest to answer conditions of each user; classifying all the ideal mastering modes in the cognitive attribute association graph through unsupervised clustering, and summarizing security levels of the cognitive attributes; and finally, performing normalization and weighted average on distance values corresponding to the three closest ideal mastering modes of each user, and selecting the level corresponding to the closest score as a cognitive security awareness assessment result of each user. The method has higher robustness and rationality.

Description

technical field [0001] The invention belongs to the field of cyberspace security / social engineering / psychometrics, and specifically relates to a questionnaire-based method for assessing individual cognitive security awareness. Background technique [0002] With the widespread popularization and accelerated development of the Internet, computer users are increasingly dependent on and interacting with the Internet, and social engineering, as a network attack method that targets humans, is becoming more and more mature. Cyber ​​attackers establish reasonable communication with others (such as sending emails, setting up phishing websites, etc.), exert a certain influence on the victim's psychology to generate cognitive bias, and make the victim take actions or behaviors that the attacker wants to achieve the attack. the purpose of the attacker's attack. [0003] In recent years, social engineering attacks have shown a trend of rapid rise and even abuse. There are many types and...

AI Technical Summary

Problems solved by technology

However, the cost of social engineering attacks is low, the attack risk is small, the attack methods and models are updated quickly, and targeted attacks such as spear attacks continue to develop, and the effect of technology-based defense methods is limited. Individual network security awareness has become the key to defending against social engineering attacks based on the subject

Images