The three Baltic countries and their partners from Norway and Liechtenstein make the team to investigate human behaviour in cybersecurity by combining research areas of computer science, psychology, and human genomics. The project aims to develop a comprehensive, science-based interdisciplinary framework to develop and assess generic and subject-related competencies of the current and future cybersecurity workforce. The data will be gathered based on the participants of international cybersecurity exercises. Risk assessment and educational components will be tested in the student environment. Statistical and data mining tools will be used to interpret multilayered data and to find correlations among genetic, behavioural, and technical skills under stressful conditions.
The project will result in the creation of a set of methodologies and tools that will include specific software components to gather and analyse data, self-report tools to collect factual data on social behavioural patterns, recommendations to consider specific biological marker information, a custom genotyping array, a methodology to develop and assess competencies, and the risk assessment process based on the joint interdisciplinary data.
The main objective is to advance the performance of the cybersecurity (CS) specialist by identifying possible improvements from three different perspectives: by regarding the human as a biological entity, by analyzing behaviour patterns of the person, and by addressing the necessary knowledge and skills of the cybersecurity specialist.
The project is based on a hypothesis that it is possible to map cyber competencies required to solve cyber-crime, defend infrastructure, or be resilient to cyber abuse and then to develop a rational competence improvement path for a CS specialist. When dealing with critical infrastructures or handling life mission-critical support systems, tools that enable the assessment of human traits or inherent risks are non-existent, or research components are not validated scientifically.
The envisioned results include a) identification of key performance indicators in individual/team level training/exercises to develop an evidence base for a comprehensive assessment of cyber competencies, b) development of methods to assess and predict the performance of a human in individual tasks and collaborative decision-making environments in cyberspace, c) development of specific tools to advance the performance of a human in learning to cope with challenges during stressful situations that require technological knowledge.
Funding: Baltic Research Programme, European Economic Area (EEA) Financial Mechanism
The Advancing Human Performance in Cybersecurity benefits from nearly €1 million grant from Iceland, Liechtenstein and Norway through the EEA Grants under the Baltic Research Programme. The aim of the programme is to consolidate the research potential of the Baltic States, Iceland, Liechtenstein and Norway, strengthen regional cooperation in research relevant to the countries of the region, and fill the gap between the national research funding and the European Union Structural Assistance.
Programme operator: the Research Council of Lithuania
Project No: S-BMT-21-6 (LT08-2-LMT-K-01-051)
Project duration: 01/01/2021 – 31/12/2023
Project promoter: Vilnius University, project leader dr. Agnė Brilingaitė (Institute of Computer Science, Cybersecurity Laboratory)
Principal investigator at the institution: dr.sc.ing. Ginta Majore
Project partners: Vilnius University (Lithuania), General Jonas Žemaitis Military Academy of Lithuania (Lithuania), Norwegian University for Technology and Science (Norway), Østfold University College (Norway), Riga Technical University (Latvia), Tallinn University of Technology (Estonia), University of Liechtenstein, Vidzeme University of Applied Sciences (Latvia)
Repository of project results: https://cs.vu.lt/projects/ADVANCES