Human-Centric Cyber Security focus of new research with Cardiff University

By Holly Giles

Phishing emails are common place in society with an estimated 1 out of 200 emails received being part of known security scams, meaning the real figure may be much higher. Through guessable passwords, trusting people with information and general predictability humans are well-known to be the weakest part of our security. Having been described as the ÔÇ£most vulnerableÔÇØ link in the chain, researchers at Cardiff University are working to show that humans can be a source of strength in cyber defence.

The team behind this idea are the Human-Centric Cyber Security Accelerator, based at the Airbus Cyber Innovation Hub in Newport. It combines forces from the National Cyber Security Centre, the Welsh Government and Cardiff University’s School of Psychology.┬á

Researcher Dr Phillip Morgan explained the project; ÔÇ£The programme represents a ÔÇÿfirst of a kindÔÇÖ research accelerator within a commercial organisation – a novel approach for the cyber-security industry. This is an exciting opportunity for the University because it allows us to work within Airbus, with a workforce of over 135,000, and with a team of over 800 security specialists to shape and accelerate research programmes and projects in the critical area of human-centric cyber security.ÔÇØ┬á

The team wants to promote humans as a source of strength in cyber security by finding approaches that ÔÇ£work with and engage people with the outcome of improving cyber security effectiveness.ÔÇØ This will be done through a range of research techniques to conduct studies and test public opinions and ideas. Through this they hope to develop a programme that targets and improves peoplesÔÇÖ cognitive flexibility, self-awareness and adaptability with the hope that this training will help protect people against scams online.

Dr Kevin Jones, Chief Information Security Officer of Airbus, said: ÔÇ£With increasingly sophisticated attacks being attempted every day, it simply isnÔÇÖt possible to protect every user against every cyber-attack. We therefore need to think differently and identify ways for security to work with an organisationÔÇÖs people, to better protect against an array of threats. With the right tools and approach, employees can be the strongest link in an organisationÔÇÖs cyber defence. Our work aims to put people-centric thinking at the heart of an organisationÔÇÖs security and weÔÇÖre keen to hear from like minded researchers and organisations who are interested in getting involved with our new Accelerator.ÔÇØ

The project has now been going for one year and it is expected to take another two years to see successful results that can be rolled out across offices in the country. It provides hope that people will soon be better prepared for the chaotic world of cyber-phishing but one can only hope the hackers don’t also evolve in this time!