Theses and dissertations

This collection includes both ASU Theses and Dissertations, submitted by graduate students, and the Barrett, Honors College theses submitted by undergraduate students. 

Displaying 1 - 2 of 2
Filtering by

Clear all filters

172009-Thumbnail Image.png

Decision-Making Biases in Cybersecurity: Measuring the Impact of the Sunk Cost Fallacy to Delay Attacker Behavior

Description
Cyber operations are a complex sociotechnical system where humans and computers are operating in an environments in constant flux, as new technology and procedures are applied. Once inside the network, establishing a foothold, or beachhead, malicious actors can collect sensitive information, scan targets, and execute an attack.Increasing defensive capabilities through…

Cyber operations are a complex sociotechnical system where humans and computers are operating in an environments in constant flux, as new technology and procedures are applied. Once inside the network, establishing a foothold, or beachhead, malicious actors can collect sensitive information, scan targets, and execute an attack.Increasing defensive capabilities through cyber deception shows great promise by providing an opportunity to delay and disrupt an attacker once network perimeter security has already been breached. Traditional Human Factors research and methods are designed to mitigate human limitations (e.g., mental, physical) to improve performance. These methods can also be used combatively to upend performance. Oppositional Human Factors (OHF), seek to strategically capitalize on cognitive limitations by eliciting decision-making errors and poor usability. Deceptive tactics to elicit decision-making biases might infiltrate attacker processes with uncertainty and make the overall attack economics unfavorable and cause an adversary to make mistakes and waste resources. Two online experimental platforms were developed to test the Sunk Cost Fallacy in an interactive, gamified, and abstracted version of cyber attacker activities. This work presents the results of the Cypher platform. Offering a novel approach to understand decision-making and the Sunk Cost Fallacy influenced by factors of uncertainty, project completion and difficulty on progress decisions. Results demonstrate these methods are effective in delaying attacker forward progress, while further research is needed to fully understand the context in which decision-making limitations do and do not occur. The second platform, Attack Surface, is described. Limitations and lessons learned are presented for future work.
ContributorsJohnson, Chelsea Kae (Author) / Gutzwiller, Robert S (Thesis advisor) / Cooke, Nancy (Committee member) / Shade, Temmie (Committee member) / Ferguson-Walter, Kimberly (Committee member) / Roscoe, Rod (Committee member) / Gray, Rob (Committee member) / Arizona State University (Publisher)
Created2022
187611-Thumbnail Image.png

Unintentional Costs of Vehicle Warning Modality for Driving Hazards

Description
Proper allocation of attention while driving is imperative to driver safety, as well as the safety of those around the driver. There is no doubt that in-vehicle alerts can effectively direct driver attention. In fact, visual, auditory, and tactile alert modalities have all shown to be more effective than no…

Proper allocation of attention while driving is imperative to driver safety, as well as the safety of those around the driver. There is no doubt that in-vehicle alerts can effectively direct driver attention. In fact, visual, auditory, and tactile alert modalities have all shown to be more effective than no alert at all. However, research on in-vehicle alerts has primarily been limited to single-hazard scenarios. The current research examines the effects of in-vehicle alert modality on driver attention towards simultaneously occurring hazards. When a driver is presented with multiple stimuli simultaneously, there is the risk that they will experience alert masking, when one stimulus is obscured by the presence of another stimulus. As the number of concurrent stimuli increases, the ability to report targets decreases. Meanwhile, the alert acts as another target that they must also process. Recent research on masking effects of simultaneous alerts has shown masking to lead to breakdowns in detection and identification of alarms during a task, outlining a possible cost of alert technology. Additionally, existing work has shown auditory alerts to be more effective in directing driver attention, resulting in faster reaction times (RTs) than visual alerts. Multiple Resource Theory suggests that because of the highly visual nature of driving, drivers may have more auditory resources than visual resources available to process stimuli without becoming overloaded. Therefore, it was predicted that auditory alerts would be more effective in allowing drivers to recognize both potential hazards, measured though reduced brake reaction times and increased accuracy during a post-drive hazard observance question. The current study did not support the hypothesis. Modality did not result in a significant difference in drivers’ attention to simultaneously occurring hazards. The salience of hazards in each scenario seemed to make the largest impact on whether participants observed the hazard. Though the hypothesis was not supported, there were several limitations. Additionally, and regardless, the study results did point to the importance of further research on simultaneously occurring hazards. These scenarios pose a risk to drivers, especially when their attention is allocated to only one of the hazards.
ContributorsMcAlphin, Morgan (Author) / Gutzwiller, Robert S (Thesis advisor) / Cooke, Nancy (Committee member) / Gray, Robert (Committee member) / Arizona State University (Publisher)
Created2023