Effects of Motivation: Rewarding Hackers for Undetected Attacks Cause Analysts to Perform Poorly

Details

• Personal Author:
  Dutt V ; Makhijani N ; Maqbool Z ; Pammi VSC
• Description:
  Objective: The aim of this study was to determine how monetary motivations influence decision making of humans performing as security analysts and hackers in a cybersecurity game. Background: Cyberattacks are increasing at an alarming rate. As cyberattacks often cause damage to existing cyber infrastructures, it is important to understand how monetary rewards may influence decision making of hackers and analysts in the cyber world. Currently, only limited attention has been given to this area. Method: In an experiment, participants were randomly assigned to three between-subjects conditions (n = 26 for each condition): equal payoff, where the magnitude of monetary rewards for hackers and defenders was the same; rewarding hacker, where the magnitude of monetary reward for hacker's successful attack was 10 times the reward for analyst's successful defense; and rewarding analyst, where the magnitude of monetary reward for analyst's successful defense was 10 times the reward for hacker's successful attack. In all conditions, half of the participants were human hackers playing against Nash analysts and half were human analysts playing against Nash hackers. Results: Results revealed that monetary rewards for human hackers and analysts caused a decrease in attack and defend actions compared with the baseline. Furthermore, rewarding human hackers for undetected attacks made analysts deviate significantly from their optimal behavior. Conclusions: If hackers are rewarded for their undetected attack actions, then this causes analysts to deviate from optimal defend proportions. Thus, analysts need to be trained not become over-enthusiastic in defending networks. Application: Applications of our results are to networks where the influence of monetary rewards may cause information theft and system damage. Description provided by NIOSH
• Subjects:
  • Behavior
  • Computers
  • Decision Making
  • Economics
  • Nervous System
  • Occupational Health
  • Safety
  • Software
• Keywords:
  • Worker motivation
  • Behavior
  • Computer programs
  • Computer software
  • Computers
  • Website
  • Humans
  • Decision making
  • Information systems
  • Economics
  More +
• ISSN:
  0018-7208
• Document Type:
  Text
• Funding:
  Grant
• Genre:
  Journal Article
• Place as Subject:
  OSHA Region 6 ; Texas
• CIO:
  National Institute for Occupational Safety and Health (NIOSH)
• Topic:
  Workplace Safety & Health
• Location:
  North America
• Pages in Document:
  420-431
• Volume:
  59
• Issue:
  3
• NIOSHTIC Number:
  nn:20052735
• Citation:
  Hum Factors 2017 May; 59(3):420-431
• Contact Point Address:
  Dr. Varun Dutt, Applied Cognitive Science Laboratory, Indian Institute of Technology, Mandi, Himachal Pradesh 175005, India
• Email:
  varun@iitmandi.ac.in
• Federal Fiscal Year:
  2017
• Performing Organization:
  University of Texas Health Science Center, Houston
• Peer Reviewed:
  True
• Start Date:
  20050701
• Source Full Name:
  Human Factors
• End Date:
  20250630
• Download URL:
  https://stacks.cdc.gov/view/cdc/212213/cdc_212213_DS1.pdf
• File Type:
  [PDF - 482.92 KB]
• Collection(s):
  National Institute for Occupational Safety and Health
• Main Document Checksum:
  urn:sha-512:dad67215d0414800f41a77dda7eec945e062039c4fec0b6827d8a056a87a71218ccc4f5d2d7a60cdcf74c49947af850b965119d497baabe5a820447be36f0f57