-
From Compliance to Impact: Tracing the Transformation of an Organizational Security Awareness Program
Authors:
Julie M. Haney,
Wayne Lutters
Abstract:
There is a growing recognition of the need for a transformation from organizational security awareness programs focused on compliance -- measured by training completion rates -- to those resulting in behavior change. However, few prior studies have begun to unpack the organizational practices of the security awareness teams tasked with executing program transformation. We conducted a year-long cas…
▽ More
There is a growing recognition of the need for a transformation from organizational security awareness programs focused on compliance -- measured by training completion rates -- to those resulting in behavior change. However, few prior studies have begun to unpack the organizational practices of the security awareness teams tasked with executing program transformation. We conducted a year-long case study of a security awareness program in a United States (U.S.) government agency, collecting data via field observations, interviews, and documents. Our findings reveal the challenges and practices involved in the progression of a security awareness program from being compliance-focused to emphasizing impact on workforce attitudes and behaviors. We uniquely capture transformational organizational security awareness practices in action via a longitudinal study involving multiple workforce perspectives. Our study insights can serve as a resource for other security awareness programs and workforce development initiatives aimed at better defining the security awareness work role.
△ Less
Submitted 14 September, 2023;
originally announced September 2023.
-
Belief places and spaces: Map** cognitive environments
Authors:
Philip Feldman,
Aaron Dant,
Wayne Lutters
Abstract:
Beliefs are not facts, but they are factive - they feel like facts. This property is what can make misinformation dangerous. Being able to deliberately navigate through a landscape of often conflicting factive statements is difficult when there is no way to show the relationships between them without incorporating the information in linear, narrative forms. In this paper, we present a mechanism to…
▽ More
Beliefs are not facts, but they are factive - they feel like facts. This property is what can make misinformation dangerous. Being able to deliberately navigate through a landscape of often conflicting factive statements is difficult when there is no way to show the relationships between them without incorporating the information in linear, narrative forms. In this paper, we present a mechanism to produce maps of belief places, where populations agree on salient features of fictional environments, and belief spaces, where subgroups have related but distinct perspectives. Using a model developed using agent-based simulation, we show that by observing the repeated behaviors of human participants in the same social context, it is possible to build maps that show the shared narrative environment overlaid with traces that show unique, individual or subgroup perspectives. Our contribution is a proof-of-concept system, based on the affordances of fantasy tabletop role-playing games, which support multiple groups interacting with the same dungeon in a controlled, online environment. The techniques used in this process are mathematically straightforward, and should be generalizable to auto-generating larger-scale maps of belief spaces from other corpora, such as discussions on social media.
△ Less
Submitted 11 July, 2019; v1 submitted 8 July, 2019;
originally announced July 2019.
-
Dungeons for Science: Map** Belief Places and Spaces
Authors:
Aaron Dant,
Philip Feldman,
Wayne Lutters
Abstract:
Tabletop fantasy role-playing games (TFRPGs) have existed in offline and online contexts for many decades, yet are rarely featured in scientific literature. This paper presents a case study where TFRPGs were used to generate and collect data for maps of belief environments using fiction co-created by multiple small groups of online tabletop gamers. The affordances of TFRPGs allowed us to collect r…
▽ More
Tabletop fantasy role-playing games (TFRPGs) have existed in offline and online contexts for many decades, yet are rarely featured in scientific literature. This paper presents a case study where TFRPGs were used to generate and collect data for maps of belief environments using fiction co-created by multiple small groups of online tabletop gamers. The affordances of TFRPGs allowed us to collect repeatable, targeted data in online field conditions. These data not only included terms that allowed us to build our maps, but also to explore nuanced ethical problems from a situated, collaborative perspective.
△ Less
Submitted 9 July, 2019; v1 submitted 10 April, 2019;
originally announced April 2019.
-
Disrupting the Coming Robot Stampedes: Designing Resilient Information Ecologies
Authors:
Philip Feldman,
Aaron Dant,
Wayne Lutters
Abstract:
Machines are designed to communicate widely and efficiently. Humans, less so. We evolved social structures that function best as small subgroups interacting within larger populations. Technology changes this dynamic, by allowing all individuals to be connected at the speed of light. A dense, tightly connected population can behave like a single agent. In animals, this happens in constrained areas…
▽ More
Machines are designed to communicate widely and efficiently. Humans, less so. We evolved social structures that function best as small subgroups interacting within larger populations. Technology changes this dynamic, by allowing all individuals to be connected at the speed of light. A dense, tightly connected population can behave like a single agent. In animals, this happens in constrained areas where stampedes can easily form. Machines do not need these kinds of conditions. The very techniques used to design best-of-breed solutions may increase the risk of dangerous mass behaviors among homogeneous machines. In this paper we argue that ecologically-based design principles such as the presence of diversity are a broadly effective strategy to defend against unintended consequences at scale.
△ Less
Submitted 26 November, 2018; v1 submitted 2 October, 2018;
originally announced October 2018.
-
Simon's Anthill: Map** and Navigating Belief Spaces
Authors:
Philip Feldman,
Aaron Dant,
Wayne Lutters
Abstract:
In the parable of Simon's Ant, an ant follows a complex path along a beach on to reach its goal. The story shows how the interaction of simple rules and a complex environment result in complex behavior. But this relationship can be looked at in another way - given path and rules, we can infer the environment. With a large population of agents - human or animal - it should be possible to build a de…
▽ More
In the parable of Simon's Ant, an ant follows a complex path along a beach on to reach its goal. The story shows how the interaction of simple rules and a complex environment result in complex behavior. But this relationship can be looked at in another way - given path and rules, we can infer the environment. With a large population of agents - human or animal - it should be possible to build a detailed map of a population's social and physical environment. In this abstract, we describe the development of a framework to create such maps of human belief space. These maps are built from the combined trajectories of a large number of agents. Currently, these maps are built using multidimensional agent-based simulation, but the framework is designed to work using data from computer-mediated human communication. Maps incorporating human data should support visualization and navigation of the "plains of research", "fashionable foothills" and "conspiracy cliffs" of human belief spaces.
△ Less
Submitted 15 April, 2018;
originally announced April 2018.
-
This One Simple Trick Disrupts Digital Communities
Authors:
Philip Feldman,
Aaron Dant,
Wayne Lutters
Abstract:
This paper describes an agent based simulation used to model human actions in belief space, a high-dimensional subset of information space associated with opinions. Using insights from animal collective behavior, we are able to simulate and identify behavior patterns that are similar to nomadic, flocking and stampeding patterns of animal groups. These behaviors have analogous manifestations in hum…
▽ More
This paper describes an agent based simulation used to model human actions in belief space, a high-dimensional subset of information space associated with opinions. Using insights from animal collective behavior, we are able to simulate and identify behavior patterns that are similar to nomadic, flocking and stampeding patterns of animal groups. These behaviors have analogous manifestations in human interaction, emerging as solitary explorers, the fashion-conscious, and members of polarized echo chambers. We demonstrate that a small portion of nomadic agents that widely traverse belief space can disrupt a larger population of stampeding agents. Extending the model, we introduce the concept of Adversarial Herding, where bad actors can exploit properties of technologically mediated communication to artificially create self sustaining runaway polarization. We call this condition the Pishkin Effect as it recalls the large scale buffalo stampedes that could be created by native Americans hunters. We then discuss opportunities for system design that could leverage the ability to recognize these negative patterns, and discuss affordances that may disrupt the formation of natural and deliberate echo chambers.
△ Less
Submitted 26 June, 2018; v1 submitted 6 April, 2018;
originally announced April 2018.
