Finding Patterns in Biological Parameters

Changes or variation occur in physiological parameters of the body when a person is going through a tough time or he is extremely happy. These changes in physiological parameters can be used for detecting emotions. Emotional computing is a field of Human Computer Interaction(HCI) where we detect human emotions. Emotion recognition based on affective physiological changes is a pattern recognition problem, and selecting specific physiological signals is necessary and helpful to recognize the emotions. In this paper, we have discussed various research papers analysing that how emotions are detected from physiological signals using non-invasive methods. Developers use various Data Mining techniques for developing such results. Heart Rate Variability(HRV), Skin Temperature(ST), Blood Volume Pulse(BVP) are the main highlights as these are key parameters in Physiological signals

Detecting Insider Attack from Behavioral and Organizational Approach

With alteration in many activities to digital procedures comes vulnerability. Cyber-attack risk keeps increasing for individuals and businesses. One of the attacks that could occur inside companies or organizations is an “Insider Attack”. Due to the complexity of human factors, this issue is mainly dealt with and discussed in previous studies through a technical approach. This research aims to find the correlation between the possibility of insider attacks with behavioural and organizational factors. To evaluate the difference in practice between different business sectors in Indonesia. The data were collected through semi-structured interviews with people from diverse work backgrounds conducted online. The interview was recorded and transcribed manually. The data analysis was done using tables to help the coding and correlating variable process. This research is supposed to determine the most impactful factor based on people’s views. Possible gaps were found between theories and what happened in the practice of the company or organization. This research outcome intends to give information to future research and serve as a reference to businesses and organizations about current development and gaps in a business environment.Keywords: Digitalization Risk, Cyber Security, Cyber attack, Insider Attack, Behavioural and Organizational Factors, Gaps, Prediction, Prevention

Impact and key challenges of insider threats on organizations and critical businesses

The insider threat has consistently been identified as a key threat to organizations and governments. Understanding the nature of insider threats and the related threat landscape can help in forming mitigation strategies, including non-technical means. In this paper, we survey and highlight challenges associated with the identification and detection of insider threats in both public and private sector organizations, especially those part of a nation’s critical infrastructure. We explore the utility of the cyber kill chain to understand insider threats, as well as understanding the underpinning human behavior and psychological factors. The existing defense techniques are discussed and critically analyzed, and improvements are suggested, in line with the current state-of-the-art cyber security requirements. Finally, open problems related to the insider threat are identified and future research directions are discussed

New Insider Threat Detection Method Based On Recurrent Neural Networks

Insider threat is a significant challenge in cybersecurity. In comparison with outside attackers, inside attackers have more privileges and legitimate access to information and facilities that can cause considerable damage to an organization. Most organizations that implement traditional cybersecurity techniques, such as intrusion detection systems, fail to detect insider threats given the lack of extensive knowledge on insider behavior patterns. However, a sophisticated method is necessary for an in-depth understanding of insider activities that the insider performs in the organization. In this study, we propose a new conceptual method for insider threat detection on the basis of the behaviors of an insider. In addition, gated recurrent unit neural network will be explored further to enhance the insider threat detector. This method will identify the optimal behavioral pattern of insider actions

VISTA:an inclusive insider threat taxonomy, with mitigation strategies

Insiders have the potential to do a great deal of damage, given their legitimate access to organisational assets and the trust they enjoy. Organisations can only mitigate insider threats if they understand what the different kinds of insider threats are, and what tailored measures can be used to mitigate the threat posed by each of them. Here, we derive VISTA (inclusiVe InSider Threat tAxonomy) based on an extensive literature review and a survey with C-suite executives to ensure that the VISTA taxonomy is not only scientifically grounded, but also meets the needs of organisations and their executives. To this end, we map each VISTA category of insider threat to tailored mitigations that can be deployed to reduce the threat

Biometrically linking document leakage to the individuals responsible

Insider threats are a significant security issue. The last decade has witnessed countless instances of data loss and exposure in which data has become publicly available and easily accessible. Losing or disclosing sensitive data or confidential information may cause substantial financial and reputational damage to a company. Whilst more recent research has specifically focused on the insider misuse problem, it has tended to focus on the information itself – either through its protection or approaches to detect leakage. In contrast, this paper presents a proactive approach to the attribution of misuse via information leakage using biometrics and a locality-sensitive hashing scheme. The hash digest of the object (e.g. a document) is mapped with the given biometric information of the person who interacted with it and generates a digital imprint file that represents the correlation between the two parties. The proposed approach does not directly store or preserve any explicit biometric information nor document copy in a repository. It is only the established correlation (imprint) is kept for the purpose of reconstructing the mapped information once an incident occurred. Comprehensive experiments for the proposed approach have shown that it is highly possible to establish this correlation even when the original version has undergone significant file modification. In many scenarios, such as changing the file format r removing parts of the document, including words and sentences, it was possible to extract and reconstruct the correlated biometric information out of a modified document (e.g. 100 words were deleted) with an average success rate of 89.31%

‘What would happen if I said “Yes”?’ : Measuring the immediate and long-term impact of improvisation training on student teachers’ subjective, neuroendocrine and psychophysiological responses

Improvisation is commonly understood as a performance or creating something without preparation. As an art form, improvised theatrical plays are created spontaneously on stage without a script. As an applied form of theatre, improvisation has been utilised in fields requiring collaboration and a tolerance for uncertainty, such as in the business and education sectors. This dissertation contributes to the literature in educational research by investigating applied improvisation as a tool to promote student teachers’ interpersonal competence. Applied improvisation enables individuals to explore and practise teaching-related encounters in a fictional and psychologically safe context. Psychological safety is particularly important when practising challenging interactions. Despite the fictionality of the context, bodily experiences during improvisations may promote experiential learning. The research summarised in this dissertation was guided by two primary research questions. First, I asked whether improvisation training influenced student teachers’ interpersonal competence and social stress. Student teachers (n = 19) participated in a 7-week (17.5-h) improvisation intervention, comprising the fundamentals of theatre improvisation and status expression (verbal and nonverbal behaviours indicating the social dominance of a person). The impact of the intervention was measured using subjective self-reports (interpersonal confidence, i.e., belief regarding one’s capability related to effective social interactions, self-esteem and experienced stress) and a large array of physiological measurements (heart rate, heart rate variability, skin conductance, facial muscle activity, frontal electroencephalogram (EEG) alpha asymmetry and stress hormone cortisol). Self-reports, physiological measurements and Trier Social Stress Tests (TSST; including public speaking) were performed before and after the improvisation intervention. An improvisation course was arranged for the control group (n = 20) following the intervention study. One year later, the long-term effects of improvisation training on self-reported interpersonal confidence were measured in a follow-up study. Second, I asked how real versus fictional social rejections impact experienced stress and psychophysiological responses. Student teachers (n = 39) participated in an experiment including both real (interview) and fictional (improvisation exercises) dyadic interactions. In the real condition, student teachers were unaware that the interviewer was an actor trained to include subtle social rejections during the interview by using three types of social rejections: devaluing, interrupting and nonverbal rejections. In the fictional condition, student teachers were informed in advance which social rejection type would be used during a later improvisation exercise. Experienced stress and psychophysiological reactivity during social rejections were measured under both experimental conditions. Following an improvisation intervention, interpersonal confidence and its components of performance confidence and a tolerance for failure increased relative to controls, whilst one year later the improved performance confidence persisted. Furthermore, a heterogeneous treatment effect was found. Those with the lowest pretest interpersonal confidence score benefited most from the improvisation intervention. No between-group differences in self-esteem were observed. Psychological and physiological indications of relief from performance-related stress were also observed following improvisation training. In addition, interpersonal confidence moderated self-reported and cardiovascular stress responses. Thus, interpersonal confidence may be worth controlling for in future research which examines the effects of interventions aimed at relieving social stress. The results also support the notion that repetition may also diminish performance-related stress, since the control group exhibited decreases in cardiovascular stress during some of the test conditions. The primary finding regarding the second research question emerged through the absence of any systematic attenuation of the psychophysiological reactivity to fictional versus real-world social rejections. In other words, although student teachers knew that improvised social rejections were fictional, their psychophysiological responses during improvisation remained relatively similar and associated with those of real-world rejections. It appears as though personal relevance and engagement during improvisation explain the relatively similar bodily responses. This result suggests that interpersonal encounters can be realistically modelled through applied improvisation. In this dissertation research, I also produced a validated self-report measure, the Interpersonal Confidence Questionnaire (ICQ), to evaluate the impact of social interaction training relying on applied improvisation. Using an additional dataset (n = 208), I validated the questionnaire and examined the impact of improvisation training on a larger sample. A confirmatory factor analysis identified six factors—performance confidence, flexibility, listening skills, a tolerance for failure, collaboration motivation and presence—that contribute to interpersonal confidence. Thus, the ICQ appeared valid and reliable as a self-report measure of interpersonal confidence. In summary, the findings from this research indicate that a relatively brief improvisation intervention promotes interpersonal confidence, specifically amongst those with low interpersonal confidence. Furthermore, improvisation training serves as an intervention against performance anxiety and generates long-term improvements to performance confidence. This dissertation provides a theoretical framework and empirical support for the application of improvisation as a tool to develop interpersonal competence skills, particularly within professions requiring face-to-face interactions. Regardless of the fictionality of the improvisational context, genuine emotions and experiences may emerge, serving as experiential learning experiences. The significance of these findings may extend to theatre-based practices and drama education in general, which rely on holistic action and personal engagement in fictional contexts. The findings agree with previous research, suggesting that including the improvisation method in teacher education curricula can enhance student teachers’ interpersonal competence as well as their skills related to sensitive and responsive teaching. Finally, this dissertation contributes to social neuroscience by recommending an ecologically valid experimental design wherein naturally unfolding social interactions can be achieved using improvisation techniques. Keywords: experiential learning, fictionality, improvisation, interpersonal confidence, intervention, psychophysiology, social interaction, social rejection, social stress, teacher education, theatre-based practicesImprovisaatiolla tarkoitetaan yleisesti esiintymistä tai toimintaa, jota ei suunnitella etukäteen. Teatterissa improvisoidut näytelmät syntyvät näyttämöllä spontaanisti ilman käsikirjoitusta. Soveltava teatteri hyödyntää improvisaatiota aloilla, joissa tarvitaan yhteistyötä ja epävarmuuden sietokykyä, kuten liike-elämässä ja koulutuksessa. Tämä väitöstyö tarkastelee teatterilähtöistä improvisaatiomenetelmää opettajakoulutuksen kontekstissa. Käyttämällä improvisaatiota soveltavan teatterin muotona on mahdollista tutkia ja harjoitella vuorovaikutukseen liittyviä kohtaamisia kuvitteellisessa ja psykologisesti turvallisessa ympäristössä. Psykologinen turvallisuus on erityisen tärkeää, kun harjoitellaan haastavissa vuorovaikutustilanteissa toimimista. Ympäristön fiktiivisyydestä, eli kuvitteellisuudesta, huolimatta improvisaatioharjoittelu tarjoaa kehollisia kokemuksia, jotka voivat edistää kokemuksellista oppimista. Väitöstutkimuksen ensimmäisenä tavoitteena oli selvittää improvisaatioharjoittelun vaikutuksia opettajaopiskelijoiden vuorovaikutusosaamiseen ja sosiaaliseen stressiin. Opettajaopiskelijoille (N = 19) järjestettiin 7 viikon (17,5 h) interventio, jossa harjoiteltiin improvisaation perusteita ja statusilmaisua, eli sanallista ja sanatonta ilmaisua liittyen valta-asemaan vuorovaikutuksessa. Intervention vaikutuksia kartoitettiin itsearviointien (vuorovaikutusvarmuus, itsetunto ja koettu stressi) kautta ja kehollisia vaikutuksia mittaamalla opettajaopiskelijoiden kehollisia vasteita (syke, sykevälivaihtelu, ihon sähkönjohtavuus, kasvolihasten aktivaatio, aivosähkökäyrä ja stressihormoni kortisoli). Fysiologiset mittaukset, Trierin sosiaalisen stressin testit (mm. julkinen puhe) sekä itsearvioinnit suoritettiin ennen improvisaatiointerventiota ja sen jälkeen. Kontrolliryhmälle (N = 20) järjestettiin improvisaatiokurssi loppumittausten jälkeen. Vuorovaikutusvarmuutta mitattiin viivästetyllä kyselyllä vielä vuoden kuluttua interventiosta. Väitöstutkimuksen toinen tavoite oli syventää ymmärrystä siitä, miten tietoisuus tilanteen fiktiivisyydestä vaikuttaa kokemukseen vertaamalla aidon ja fiktiivisen vuorovaikutustilanteen kehollisia vasteita. Opettajaopiskelijat (N = 39) osallistuivat kokeeseen, joka sisälsi sekä aidon (haastattelu) että fiktiivisen (improvisaatioharjoittelu) vuorovaikutustilanteen. Aidossa tilanteessa opettajaopiskelijat eivät tienneet, että haastattelijan tehtävänä oli epäsuorasti torjua opiskelijoiden vastauksia vähättelemällä, keskeyttämällä ja sanattomalla torjunnalla. Fiktiivisessä tilanteessa opettajaopiskelijoille kerrottiin etukäteen mitä em. torjuntatapaa improvisaatioharjoituksessa käytetään. Molemmissa koetilanteissa mitattiin koettua stressiä ja kehollisia vasteita epäsuorien sosiaalisten torjuntojen aikana. Improvisaatioharjoittelu lisäsi osallistujien vuorovaikutusvarmuutta sekä sen osatekijöitä esiintymisvarmuutta ja epäonnistumisen sietokykyä, kun tuloksia verrattiin kontrolliryhmään. Vuoden kuluttua interventiosta esiintymisvarmuus säilyi korkeammalla tasolla kontrolliryhmään verrattuna. Tulosten mukaan improvisaatioharjoittelusta oli hyötyä erityisesti epävarmimmille opettajaopiskelijoille, joilla vuorovaikutus- ja esiintymisvarmuus kasvoi eniten. Itsetunnossa ei havaittu eroa interventio- ja kontrolliryhmien välillä. Sykevälivaihtelu ja kasvolihasten aktivaatio osoittivat, että improvisaatiokurssilaiset olivat rentoutuneempia esiintymisvuoroa odottaessa kuin kontrolliryhmä. Sykevälivaihtelun ja koetun stressin mukaan epävarmimpien kurssilaisten stressitaso laski enemmän kuin varmempien. Tulokset tukevat myös käsitystä, että toistoharjoittelu voi lieventää esiintymiseen liittyvää stressiä, koska myös kontrolliryhmässä stressivasteet laskivat osassa esiintymistilanteita. Väitöstutkimuksen keskeinen löydös vertailtaessa aitoja ja fiktiivisiä vuorovaikutustilanteita oli se, että improvisoitujen ja aitojen sosiaalisten torjuntojen keholliset vasteet eivät systemaattisesti eronneet toisistaan. Toisin sanoen, vaikka opettajaopiskelijat tiesivät, että improvisoidut sosiaaliset torjunnat olivat fiktiivisiä, keholliset vasteet olivat samankaltaisia kuin vastaavassa aidossa tilanteessa. Tulokset viittaavat siihen, että sosiaalisia vuorovaikutustilanteita voidaan mallintaa realistisesti teatterilähtöisen improvisaation keinoin. Väitöstyö tuotti myös validoidun vuorovaikutusvarmuuden itsearviointimittarin improvisaatiopohjaisten vuorovaikutuskoulutusten vaikutusten arviointiin. Itsearviointimittarin validoinnissa käytettiin konfirmatorista faktorianalyysia ja laajempaa kyselyaineistoa (N = 208). Faktorianalyysi osoitti, että vuorovaikutusvarmuuteen sisältyy kuusi osa-aluetta: esiintymisvarmuus, joustavuus, kuunteleminen, epäonnistumisen sietokyky, yhteistyömotivaatio ja läsnäolo. Tulosten mukaan mittari on myös luotettava vuorovaikutusvarmuuden itsearvioinnin väline. Tutkimustulosten mukaan jo suhteellisen lyhyt improvisaatioharjoittelu voi lisätä erityisesti epävarmojen henkilöiden vuorovaikutusvarmuutta sekä lieventää esiintymisjännitystä. Esiintymisvarmuuden osalta positiiviset vaikutukset olivat pitkäaikaisia. Väitöstyö tuottaa myös uutta, empiiristä tietoa improvisaatioharjoittelun kehollisista vaikutuksista. Tulosten merkitystä voidaan ulottaa myös muille soveltavan teatterin alueille, joissa teatterilähtöisillä menetelmillä pyritään tuottamaan elämyksellisiä oppimiskokemuksia ja kokemuksellista oppimista. Väitöstutkimus luo teoreettista pohjaa sovelletun improvisaation käyttämiselle laajemminkin työelämän ja arkipäivän vuorovaikutustilanteiden mallintamiseen. Löydökset vahvistavat aikaisempia kansainvälisiä tutkimustuloksia, joiden mukaan improvisaatio opettajankoulutuksen osana lisäisi opettajan vuorovaikutuskompetenssia sekä opetuksen sensitiivisyyttä ja vuorovaikutteisuutta. Poikkitieteellinen väitöstyö osoitti myös käytännön suuntaviivoja improvisaation ja neurotieteen yhdistämiselle vuorovaikutuksen kokeellisessa tutkimuksessa. Avainsanat: fiktiivisyys, improvisaatio, interventio, kokemuksellinen oppiminen, opettajakoulutus, psykofysiologia, sosiaalinen stressi, sosiaalinen torjunta, teatterilähtöiset menetelmät, vuorovaikutus, vuorovaikutusvarmuu

Development and Validation of a Proof-of-Concept Prototype for Analytics-based Malicious Cybersecurity Insider Threat in a Real-Time Identification System

Insider threat has continued to be one of the most difficult cybersecurity threat vectors detectable by contemporary technologies. Most organizations apply standard technology-based practices to detect unusual network activity. While there have been significant advances in intrusion detection systems (IDS) as well as security incident and event management solutions (SIEM), these technologies fail to take into consideration the human aspects of personality and emotion in computer use and network activity, since insider threats are human-initiated. External influencers impact how an end-user interacts with both colleagues and organizational resources. Taking into consideration external influencers, such as personality, changes in organizational polices and structure, along with unusual technical activity analysis, would be an improvement over contemporary detection tools used for identifying at-risk employees. This would allow upper management or other organizational units to intervene before a malicious cybersecurity insider threat event occurs, or mitigate it quickly, once initiated. The main goal of this research study was to design, develop, and validate a proof-of-concept prototype for a malicious cybersecurity insider threat alerting system that will assist in the rapid detection and prediction of human-centric precursors to malicious cybersecurity insider threat activity. Disgruntled employees or end-users wishing to cause harm to the organization may do so by abusing the trust given to them in their access to available network and organizational resources. Reports on malicious insider threat actions indicated that insider threat attacks make up roughly 23% of all cybercrime incidents, resulting in $2.9 trillion in employee fraud losses globally. The damage and negative impact that insider threats cause was reported to be higher than that of outsider or other types of cybercrime incidents. Consequently, this study utilized weighted indicators to measure and correlate simulated user activity to possible precursors to malicious cybersecurity insider threat attacks. This study consisted of a mixed method approach utilizing an expert panel, developmental research, and quantitative data analysis using the developed tool on simulated data set. To assure validity and reliability of the indicators, a panel of subject matter experts (SMEs) reviewed the indicators and indicator categorizations that were collected from prior literature following the Delphi technique. The SMEs’ responses were incorporated into the development of a proof-of-concept prototype. Once the proof-of-concept prototype was completed and fully tested, an empirical simulation research study was conducted utilizing simulated user activity within a 16-month time frame. The results of the empirical simulation study were analyzed and presented. Recommendations resulting from the study also be provided