[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to main content

Impact of Team Collaboration on Cybersecurity Situational Awareness

  • Chapter
  • First Online:
Theory and Models for Cyber Situation Awareness

Part of the book series: Lecture Notes in Computer Science ((LNPSE,volume 10030))

Abstract

Information complexity and expanse of cybersecurity space surpasses the cognitive ability of individual analysts to be truly situationally aware. Team level situation awareness in cyber security can be described as the coordinated perception and comprehension of significant events in the network by all team members that serve as the basis for effective response actions. Effective teamwork is imperative to transform individual analysts’ disparate cognition and situation awareness into team level, collective cognition and situation awareness. We employed a hybrid methodology that makes opportunistic use of a mix of field observations, simulation, modeling, and laboratory experimentation to study and improve team situation awareness in the cyber security domain. Findings from experiments summarized in this chapter demonstrate the important role of teamwork at every level of cyber security defense and the detrimental effect of team process loss on overall cyber defense performance.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Subscribe and save

Springer+ Basic
£29.99 /Month
  • Get 10 units per month
  • Download Article/Chapter or eBook
  • 1 Unit = 1 Article or 1 Chapter
  • Cancel anytime
Subscribe now

Buy Now

Chapter
GBP 19.95
Price includes VAT (United Kingdom)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
GBP 39.99
Price includes VAT (United Kingdom)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
GBP 49.99
Price includes VAT (United Kingdom)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Similar content being viewed by others

References

  1. Cannon-Bowers, J.A., Salas, E.: Reflections on shared cognition. J. Organ. Behav. 22(2), 195–202 (2001)

    Article  Google Scholar 

  2. Cannon-Bowers, J.A., Salas, E., Converse, S.: Cognitive psychology and team training: training shared mental models and complex systems. Hum. Factors Soc. Bull. 33(12), 1–4 (1990)

    Google Scholar 

  3. Champion, M., Rajivan, P., Cooke, N.J., Jariwala, S., et al.: Team-based cyber defense analysis. In: 2012 IEEE International Multi-Disciplinary Conference on Cognitive Methods in Situation Awareness and Decision Support (CogSIMA), pp. 218–221. IEEE (2012)

    Google Scholar 

  4. Chen, T.R., Shore, D.B., Zaccaro, S.J., Dalal, R.S., Tetrick, L.E., Gorab, A.K.: An organizational psychology perspective to examining computer security incident response teams. IEEE Secur. Priv. 5, 61–67 (2014)

    Article  Google Scholar 

  5. Christensen, C., Abbott, A.S.: 10 team medical decision making. In: Decision Making in Health Care: Theory, Psychology, and Applications, p. 267 (2003)

    Google Scholar 

  6. Collyer, S.C., Malecki, G.S.: Tactical decision making under stress: history and overview. In: Making Decisions Under Stress: Implications for Individual and Team Training. American Psychological Association, Washington, DC (1998)

    Google Scholar 

  7. Converse, S.: Shared mental models in expert team decision making. In: Individual and Group Decision Making: Current Issues, p. 221 (1993)

    Google Scholar 

  8. Cooke, N.J., Gorman, J.C., Myers, C.W., Duran, J.L.: Interactive team cognition. Cognit. Sci. 37(2), 255–285 (2013)

    Article  Google Scholar 

  9. Cooke, N.J., Gorman, J.C., Rowe, L.J.: An ecological perspective on team cognition. Technical report, DTIC Document (2004)

    Google Scholar 

  10. Cooke, N.J., Gorman, J.C., Winner, J.L., Durso, F.: Team cognition. In: Handbook of Applied Cognition, vol. 2, pp. 239–268 (2007)

    Google Scholar 

  11. Cooke, N.J., Salas, E., Kiekel, P.A., Bell, B.: Advances in measuring team cognition. In: Team Cognition: Understanding the Factors That Drive Process and Performance, pp. 83–106 (2004)

    Google Scholar 

  12. Cooke, N.J., Shope, S.M.: Designing a synthetic task environment. In: Scaled Worlds: Development, Validation, and Application, pp. 263–278 (2004)

    Google Scholar 

  13. D’Amico, A., Whitley, K., Tesone, D., O’Brien, B., Roth, E.: Achieving cyber defense situational awareness: a cognitive task analysis of information assurance analysts. In: Proceedings of the Human Factors and Ergonomics Society Annual Meeting, vol. 49, pp. 229–233. SAGE Publications (2005)

    Google Scholar 

  14. Dutta, A., McCrohan, K.: Managements role in information security in a cyber economy. Calif. Manag. Rev. 45(1), 67–87 (2002)

    Article  Google Scholar 

  15. Endsley, M.R.: Toward a theory of situation awareness in dynamic systems. Hum. Factors J. Hum. Factors Ergon. Soc. 37(1), 32–64 (1995)

    Article  Google Scholar 

  16. Endsley, M.R.: Level of automation effects on performance, situation awareness and workload in a dynamic control task. Ergonomics 42(3), 462–492 (1999)

    Article  Google Scholar 

  17. Endsley, M.: Final Report: Situation Awareness in an Advanced Strategic Mission (nor doc 89–32). Northrop Corporation, Hawthorne (1989)

    Google Scholar 

  18. Gorman, J.C., Cooke, N.J., Winner, J.L.: Measuring team situation awareness in decentralized command and control environments. Ergonomics 49(12–13), 1312–1325 (2006)

    Article  Google Scholar 

  19. Granåsen, M., Andersson, D.: Measuring team effectiveness in cyber-defense exercises: a cross-disciplinary case study. Cognit. Technol. Work 18(1), 121–143 (2016). http://dx.doi.org/10.1007/s10111-015-0350-2

  20. Hastie, R., Penrod, S., Pennington, N.: Inside the Jury. The Lawbook Exchange Ltd., Clark (1983)

    Book  Google Scholar 

  21. Jariwala, S., Champion, M., Rajivan, P., Cooke, N.J.: Influence of team communication and coordination on the performance of teams at the ICTF competition. In: Proceedings of the Human Factors and Ergonomics Society Annual Meeting, vol. 56, pp. 458–462. SAGE Publications (2012)

    Google Scholar 

  22. Klimoski, R., Mohammed, S.: Team mental model: construct or metaphor? J. Manag. 20(2), 403–437 (1994)

    Google Scholar 

  23. Kraemer, S., Carayon, P., Clem, J.: Human and organizational factors in computer and information security: pathways to vulnerabilities. Comput. Secur. 28(7), 509–520 (2009)

    Article  Google Scholar 

  24. Langan-Fox, J., Code, S., Langfield-Smith, K.: Team mental models: techniques, methods, and analytic approaches. Hum. Factors J. Hum. Factors Ergon. Soc. 42(2), 242–271 (2000)

    Article  Google Scholar 

  25. McNeese, M., Cooke, N.J., Champion, M.A.: Situating cyber situation awareness. In: Proceedings of the 10th International Conference on Naturalistic Decision Making (2011)

    Google Scholar 

  26. Natter, M., Bos, N., Ockerman, J., Happel, J., Abitante, G., Tzeng, N.: A c2 hidden profile experiment (2009)

    Google Scholar 

  27. Puvathingal, B.J., Hantula, D.A.: Revisiting the psychology of intelligence analysis: from rational actors to adaptive thinkers. Am. Psychol. 67(3), 199 (2012)

    Article  Google Scholar 

  28. Railsback, S.F., Grimm, V.: Agent-Based and Individual-Based Modeling: A Practical Introduction. Princeton University Press, Princeton (2011)

    MATH  Google Scholar 

  29. Rajivan, P.: CyberCog a synthetic task environment for measuring cyber situation awareness. Ph.D. thesis, Arizona State University (2011)

    Google Scholar 

  30. Rajivan, P.: Information pooling bias in collaborative cyber forensics. Ph.D. thesis, Arizona State University (2014)

    Google Scholar 

  31. Rajivan, P., Champion, M., Cooke, N.J., Jariwala, S., Dube, G., Buchanan, V.: Effects of Teamwork versus group work on signal detection in cyber defense teams. In: Schmorrow, D.D., Fidopiastis, C.M. (eds.) AC 2013. LNCS, vol. 8027, pp. 172–180. Springer, Heidelberg (2013). doi:10.1007/978-3-642-39454-6_18

    Chapter  Google Scholar 

  32. Rajivan, P., Janssen, M.A., Cooke, N.J.: Agent-based model of a cyber security defense analyst team. In: Proceedings of the Human Factors and Ergonomics Society Annual Meeting, vol. 57, pp. 314–318. SAGE Publications (2013)

    Google Scholar 

  33. Rouse, W.B., Morris, N.M.: On looking into the black box: prospects and limits in the search for mental models. Psychol. Bull. 100(3), 349 (1986)

    Article  Google Scholar 

  34. Salas, E., Cooke, N.J., Rosen, M.A.: On teams, teamwork, and team performance: discoveries and developments. Hum. Factors J. Hum. Factors Ergon. Soc. 50(3), 540–547 (2008)

    Article  Google Scholar 

  35. Salas, E., Prince, C., Baker, D.P., Shrestha, L.: Situation awareness in team performance: implications for measurement and training. Hum. Factors J. Hum. Factors Ergon. Soc. 37(1), 123–136 (1995)

    Article  Google Scholar 

  36. Shu, Y., Furuta, K.: An inference method of team situation awareness based on mutual awareness. Cognit. Technol. Work 7(4), 272–287 (2005)

    Article  Google Scholar 

  37. Silva, A., McClain, J., Reed, T., Anderson, B., Nauer, K., Abbott, R., Forsythe, C.: Factors impacting performance in competitive cyber exercises. In: Proceedings of the Interservice/Interagency Training, Simulation and Education Conference, Orlando, FL (2014)

    Google Scholar 

  38. Stasser, G., Titus, W.: Pooling of unshared information in group decision making: biased information sampling during discussion. J. Pers. Soc. Psychol. 48(6), 1467 (1985)

    Article  Google Scholar 

  39. Straus, S.G., Parker, A.M., Bruce, J.B.: The group matters: a review of processes and outcomes in intelligence analysis. Group Dyn. Theory Res. Pract. 15(2), 128 (2011)

    Article  Google Scholar 

  40. Sundaramurthy, S.C., Bardas, A.G., Case, J., Ou, X., Wesch, M., McHugh, J., Rajagopalan, S.R.: A human capital model for mitigating security analyst burnout. In: Eleventh Symposium on Usable Privacy and Security (SOUPS 2015), pp. 347–359 (2015)

    Google Scholar 

  41. Walker, G.H., Stanton, N.A., Baber, C., Wells, L., Gibson, H., Salmon, P., Jenkins, D.: From ethnography to the east method: a tractable approach for representing distributed cognition in air traffic control. Ergonomics 53(2), 184–197 (2010)

    Article  Google Scholar 

  42. Wegner, D.M.: Transactive memory: a contemporary analysis of the group mind. In: Mullen, B., Goethals, G.R. (eds.) Theories of Group Behavior, pp. 185–208. Springer, New York (1987)

    Chapter  Google Scholar 

Download references

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Prashanth Rajivan .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2017 Springer International Publishing AG

About this chapter

Cite this chapter

Rajivan, P., Cooke, N. (2017). Impact of Team Collaboration on Cybersecurity Situational Awareness. In: Liu, P., Jajodia, S., Wang, C. (eds) Theory and Models for Cyber Situation Awareness. Lecture Notes in Computer Science(), vol 10030. Springer, Cham. https://doi.org/10.1007/978-3-319-61152-5_8

Download citation

  • DOI: https://doi.org/10.1007/978-3-319-61152-5_8

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-319-61151-8

  • Online ISBN: 978-3-319-61152-5

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics