Toward Robust Models of Cyber Situation Awareness

Cybersecurity is a rapidly growing worldwide concern that provides a novel, multifaceted problem space for Human Factors researchers. Current models of Cyber Situation Awareness (CSA) have begun to identify the foundational elements with respect to individual analysts. We propose that the CSA models can be augmented to include awareness of end user behaviors and favor knowledge of the cyber threat landscape. In this paper, we present a review of current CSA models and definitions. We then expand upon existing models by considering how they apply at the user level or in the incorporation of diverse and distributed participating agents, such as end-users and adversaries.