Finding a needle in a haystack: toward a psychologically informed method for aviation security screening

Current aviation security systems identify behavioral indicators of deception to assess risks to flights, but they lack a strong psychological basis or empirical validation. We present a new method that tests the veracity of passenger accounts. In an in vivo double-blind randomized-control trial conducted in international airports, security agents detected 66% of deceptive passengers using the veracity test method compared with less than 5% using behavioral indicator recognition. As well as revealing advantages of veracity testing over behavioral indicator identification, the study provides the highest levels to date of deception detection in a realistic setting where the known base rate of deceptive individuals is low

Sorting Insiders From Co-Workers: Remote Synchronous Computer-Mediated Triage for Investigating Insider Attacks

Objective Develop and investigate the potential of a remote, computer-mediated and synchronous text-based triage, which we refer to as InSort, for quickly highlighting persons of interest after an insider attack. Background Insiders maliciously exploit legitimate access to impair the confidentiality and integrity of organizations. The globalisation of organisations and advancement of information technology means employees are often dispersed across national and international sites, working around the clock, often remotely. Hence, investigating insider attacks is challenging. However, the cognitive demands associated with masking insider activity offer opportunities. Drawing on cognitive approaches to deception and understanding of deception-conveying features in textual responses, we developed InSort, a remote computer-mediated triage. Method During a 6-hour immersive simulation, participants worked in teams, examining password protected, security sensitive databases and exchanging information during an organized crime investigation. Twenty-five percent were covertly incentivized to act as an ‘insider’ by providing information to a provocateur. Results Responses to InSort questioning revealed insiders took longer to answer investigation relevant questions, provided impoverished responses, and their answers were less consistent with known evidence about their behaviours than co-workers. Conclusion Findings demonstrate InSort has potential to expedite information gathering and investigative processes following an insider attack. Application InSort is appropriate for application by non-specialist investigators and can be quickly altered as a function of both environment and event. InSort offers a clearly defined, well specified, approach for use across insider incidents, and highlights the potential of technology for supporting complex time critical investigations

The Structure and Function of Spontaneous Analogising in Domain-Based Problem Solving.

Laboratory-based studies of problem solving suggest that transfer of solution principles from an analogue to a target arises only minimally without the presence of directive hints. Recently, however, real-world studies indicate that experts frequently and spontaneously use analogies in domain-based problem solving. There is also some evidence that in certain circumstances domain novices can draw analogies designed to illustrate arguments. It is less clear, however, whether domain novices can invoke analogies in the sophisticated manner of experts to enable them to progress problem solving. In the current study groups of novices and experts tackled large-scale management problems. Spontaneous analogising was observed in both conditions, with no marked differences between expertise levels in the frequency, structure or function of analogising. On average four analogies were generated by groups per hour, with significantly more relational mappings between analogue and target being produced than superficial object-and-attribute mappings. Analogising served two different purposes: problem solving (dominated by relational mappings), and illustration (which for novices was dominated by object-and-attribute mappings). Overall, our novices showed a sophistication in domain-based analogical reasoning that is usually only observed with experts, in addition to a sensitivity to the pragmatics of analogy use