BioEnvsense: A Usable Cybersecurity Framework for Critical Infrastructure

• Published in: 2023 International Conference on Smart Applications, Communications and Networking (SmartNets) pp. 1 - 5
• Main Author: Farid, Farnaz
• Format: Conference Proceeding
• Language: English
• Published: IEEE 25.07.2023
• Subjects: Behavioral sciences; biometric; Control systems; cyber behavior; cyber incidents; Employee welfare; Face recognition; Fingerprint recognition; insider threat; Limiting; Training; usable security
• DOI: 10.1109/SmartNets58706.2023.10215755

Cybersecurity solutions require a multidisciplinary approach, as around 95% of cybersecurity incidents stem from behavioral issues. Insider threats are a significant concern, with 90% of enterprises reporting experiencing such threats. Behavioral-based solutions have been proposed to deal with non-intentional insider threats, which include timely notifications and effective training materials. Biometric-based solutions such as face recognition and fingerprints have also been proposed to minimize such threats. However, there is still a need for new approaches to introduce controls on systems to deal with unpredictable user behavior and states to mitigate such malicious cybersecurity incidents. This work proposes a conceptual framework for determining the emotional states of users using soft biometrics and contextual working conditions using sensors to minimize non-intentional behavioral-based malicious cyber incidents. The framework will measure users' mental and emotional states and environmental conditions and take extra precautions when necessary, such as providing instructions, backups or limiting access. Overall, the proposed framework offers a usable contextual and biometric-based cybersecurity solution that could significantly improve the security of systems and users alike.