{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,18]],"date-time":"2026-06-18T08:36:34Z","timestamp":1781771794715,"version":"3.54.5"},"reference-count":65,"publisher":"Emerald","issue":"1","license":[{"start":{"date-parts":[[2019,2,4]],"date-time":"2019-02-04T00:00:00Z","timestamp":1549238400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.emerald.com\/insight\/site-policies"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["ITP"],"published-print":{"date-parts":[[2019,2,4]]},"abstract":"<jats:sec><jats:title content-type=\"abstract-subheading\">Purpose<\/jats:title><jats:p>The purpose of this paper is to explore the role of four cognitive biases, namely, selective perception, exposure to limited alternatives, adjustment and anchoring, and illusion of control in anticipating and responding to Distributed-Denial-of-Service (DDoS) attacks.<\/jats:p><\/jats:sec><jats:sec><jats:title content-type=\"abstract-subheading\">Design\/methodology\/approach<\/jats:title><jats:p>The paper is based on exploratory case study research and secondary data on decision making in the Australian Bureau of Statistics (ABS) in regards to planning and managing DDoS attacks on Census day in 2016.<\/jats:p><\/jats:sec><jats:sec><jats:title content-type=\"abstract-subheading\">Findings<\/jats:title><jats:p>Cognitive biases limited the ABS\u2019s awareness of the eCensus system\u2019s vulnerabilities, preparation for and management of DDoS attacks. Cyberattacks are on the increase, and managers should expect and be prepared to deal with them.<\/jats:p><\/jats:sec><jats:sec><jats:title content-type=\"abstract-subheading\">Research limitations\/implications<\/jats:title><jats:p>Due to the sensitivity of the topic, it was not possible to interview relevant stakeholders. Analysis is based on high-quality secondary data that includes comprehensive government reports investigating the events on Census day.<\/jats:p><\/jats:sec><jats:sec><jats:title content-type=\"abstract-subheading\">Practical implications<\/jats:title><jats:p>Cyberattacks are inevitable and not an aberration. A checklist of actions is identified to help organisations avoid the failures revealed in the case study. Managers need to increase their awareness of cyberattacks, develop clear processes for dealing with them and increase the robustness of their decision-making processes relating to cybersecurity.<\/jats:p><\/jats:sec><jats:sec><jats:title content-type=\"abstract-subheading\">Originality\/value<\/jats:title><jats:p>This the authors believe that it is the first major study of the DDoS attacks on the Australian census. DDoS is a security reality of the twenty-first century and this case study illustrates the significance of cognitive biases and their impact on developing effective decisions and conducting regular risk assessments in managing cyberattacks.<\/jats:p><\/jats:sec>","DOI":"10.1108\/itp-11-2017-0390","type":"journal-article","created":{"date-parts":[[2019,1,8]],"date-time":"2019-01-08T10:08:43Z","timestamp":1546942123000},"page":"171-188","source":"Crossref","is-referenced-by-count":11,"title":["The role of cognitive biases in anticipating and responding to cyberattacks"],"prefix":"10.1108","volume":"32","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7922-5621","authenticated-orcid":false,"given":"Arnela","family":"Ceric","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Peter","family":"Holland","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"140","reference":[{"issue":"11","key":"key2020092502074572300_ref001","doi-asserted-by":"crossref","first-page":"1312","DOI":"10.1016\/j.comcom.2012.04.008","article-title":"Analyzing well-known countermeasures against distributed denial of service attacks","volume":"35","year":"2012","journal-title":"Computer Communications"},{"key":"key2020092502074572300_ref002","doi-asserted-by":"crossref","first-page":"51","DOI":"10.1016\/j.chb.2015.01.039","article-title":"Effects of cyber security knowledge on attack detection","volume":"48","year":"2015","journal-title":"Computers in Human Behavior"},{"issue":"5","key":"key2020092502074572300_ref003","doi-asserted-by":"crossref","first-page":"12","DOI":"10.1016\/S1353-4858(15)30039-8","article-title":"Hacktivism goes hard core","volume":"2015","year":"2015","journal-title":"Network Security"},{"key":"key2020092502074572300_ref004","unstructured":"CapDA (2014), \u201cCensus 2016: ICT capacity and capability phase 1 review report\u201d, available at: www.aph.gov.au\/DocumentStore.ashx?id=8cfbdce9-add4-4224-b955-53bb2e1a3722 (accessed 8 May 2018)."},{"issue":"2","key":"key2020092502074572300_ref005","doi-asserted-by":"crossref","first-page":"147","DOI":"10.1016\/S0167-9236(02)00139-2","article-title":"An exploratory cognitive DSS for strategic decision making","volume":"36","year":"2003","journal-title":"Decision Support Systems"},{"issue":"1","key":"key2020092502074572300_ref006","doi-asserted-by":"crossref","first-page":"20","DOI":"10.1017\/S193029750000067X","article-title":"Cognitive abilities and superior decision making under risk: a protocol analysis and process model evaluation","volume":"4","year":"2009","journal-title":"Judgment and Decision Making"},{"issue":"2","key":"key2020092502074572300_ref007","first-page":"669","article-title":"Why bounded rationality?","volume":"34","year":"1996","journal-title":"Journal of Economic Literature"},{"issue":"6","key":"key2020092502074572300_ref008","doi-asserted-by":"crossref","first-page":"757","DOI":"10.1111\/1467-6486.00157","article-title":"Cognitive biases and strategic decision processes: an integrative perspective","volume":"36","year":"1999","journal-title":"Journal of Management Studies"},{"key":"key2020092502074572300_ref009","first-page":"280","volume-title":"Cyber Situation Awareness: Modeling the Security Analyst in a Cyber-Attack Scenario through Instance-Based Learning","year":"2011"},{"key":"key2020092502074572300_ref010","unstructured":"Endsley, M.R. (2000), \u201cTheoretical underpinnings of situation awareness: a critical review\u201d, in Endsley, M.R. and Garland, D.J. (Eds), Situation Awareness Analysis and Measurement, Lawrence Erlbaum Associates, Mahwah, NJ, pp. 3-32."},{"issue":"3","key":"key2020092502074572300_ref011","doi-asserted-by":"crossref","first-page":"199","DOI":"10.1002\/bdm.495","article-title":"When effortful thinking influences judgmental anchoring: differential effects of forewarning and incentives on self-generated and externally provided anchors","volume":"18","year":"2005","journal-title":"Journal of Behavioral Decision Making"},{"issue":"4","key":"key2020092502074572300_ref012","doi-asserted-by":"crossref","first-page":"502","DOI":"10.1111\/j.1467-9280.2009.02311.x","article-title":"Power and illusory control: a generative force behind power\u2019s far-reaching effects","volume":"20","year":"2009","journal-title":"Psychological Science"},{"issue":"1","key":"key2020092502074572300_ref013","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1002\/(SICI)1099-0771(200001\/03)13:1<1::AID-BDM333>3.0.CO;2-S","article-title":"The affect heuristic in judgments of risks and bene\ufb01ts","volume":"13","year":"2000","journal-title":"Journal of Behavioral Decision Making"},{"issue":"1","key":"key2020092502074572300_ref014","doi-asserted-by":"crossref","first-page":"13","DOI":"10.1086\/209141","article-title":"The availability heuristic and perceived risk","volume":"15","year":"1988","journal-title":"Journal of Consumer Research"},{"key":"key2020092502074572300_ref015","doi-asserted-by":"crossref","first-page":"18","DOI":"10.1016\/j.cose.2014.06.008","article-title":"Cyber situational awareness \u2013 a systematic review of the literature","volume":"46","year":"2014","journal-title":"Computers & Security"},{"issue":"4","key":"key2020092502074572300_ref016","doi-asserted-by":"crossref","first-page":"657","DOI":"10.1037\/0022-3514.81.4.657","article-title":"First offers as anchors: the role of perspective-taking and negotiator focus","volume":"81","year":"2001","journal-title":"Journal of Personality & Social Psychology"},{"key":"key2020092502074572300_ref017","doi-asserted-by":"crossref","unstructured":"Gonzalez, C., Ben-Asher, N., Oltramari, A. and Lebiere, C. (2014), \u201cCognition and technology\u201d, in Kott, A., Wang, C. and Erbacher, R.F. (Eds), Cyber Defense and Situational Awareness, Springer International Publishing, Cham, pp. 93-117.","DOI":"10.1007\/978-3-319-11391-3_6"},{"key":"key2020092502074572300_ref018","volume-title":"Qualitative Methods in Management Research","year":"2000","edition":"2nd ed."},{"issue":"8","key":"key2020092502074572300_ref019","doi-asserted-by":"crossref","first-page":"534","DOI":"10.1111\/j.0956-7976.2004.00715.x","article-title":"Decisions from experience and the effect of rare events in risky choice","volume":"15","year":"2004","journal-title":"Psychological Science"},{"issue":"2","key":"key2020092502074572300_ref020","doi-asserted-by":"crossref","first-page":"97","DOI":"10.1046\/J.1098-1616.2003.026.x","article-title":"The impact of denial-of-service attack announcements on the market value of firms","volume":"6","year":"2003","journal-title":"Risk Management and Insurance Review"},{"issue":"2","key":"key2020092502074572300_ref021","doi-asserted-by":"crossref","first-page":"129","DOI":"10.1002\/smj.4250050204","article-title":"Cognitive biases and their impact on strategic planning","volume":"5","year":"1984","journal-title":"Strategic Management Journal"},{"key":"key2020092502074572300_ref022","unstructured":"Kalisch, D.W. (2016a), \u201cPresentation: ABS delivering public value\u201d, CFO Forum Canberra, 18 May, available at: www.abs.gov.au\/websitedbs\/d3310114.nsf\/home\/Australian+Statistician+-+Speeches+-+ABS+Delivering+Public+Value (accessed 8 May 2018)."},{"key":"key2020092502074572300_ref023","unstructured":"Kalisch, D.W. (2016b), \u201cLeadership in the public sector in the 21st century \u2013 some learnings from the 2016 Census experience\u201d, Institute of Public Administration Australia (Tasmania Branch), 13 September 2017, available at: www.abs.gov.au\/websitedbs\/D3310114.nsf\/Home\/Australian+Statistician+-+Speeches+-+Leadership+in+the+public+sector (accessed 8 May 2018)."},{"key":"key2020092502074572300_ref024","unstructured":"Kalisch, D.W. (2016c), \u201cSenate inquiry opening statement\u201d, Parliament House, Canberra, 25 October, available at: www.abs.gov.au\/websitedbs\/d3310114.nsf\/home\/Australian+Statistician+-+Speeches+-+Senate%20Inquiry+Opening+Statement (accessed 8 May 2018)."},{"key":"key2020092502074572300_ref025","unstructured":"Kalisch, D.W. (2016d), \u201cCensus 2016: lessons learned \u2013 improving cyber security culture and practice\u201d, Institute of Public Administration (ACT), 13 December, available at: www.abs.gov.au\/websitedbs\/d3310114.nsf\/home\/Australian%20Statistician%20-%20Speeches%20-%20Census%202016%20Lessons%20Learned (accessed 8 May 2018)."},{"issue":"3","key":"key2020092502074572300_ref026","doi-asserted-by":"crossref","first-page":"391","DOI":"10.1111\/j.1540-5915.2007.00164.x","article-title":"Escalation: the role of problem recognition and cognitive bias","volume":"38","year":"2007","journal-title":"Decision Sciences"},{"issue":"3","key":"key2020092502074572300_ref027","doi-asserted-by":"crossref","first-page":"631","DOI":"10.1111\/j.1539-6924.2006.00773.x","article-title":"The role of the affect and availability heuristics in risk communication","volume":"26","year":"2006","journal-title":"Risk Analysis"},{"issue":"10","key":"key2020092502074572300_ref028","doi-asserted-by":"crossref","first-page":"2380","DOI":"10.1287\/mnsc.2013.1711","article-title":"Tempus fugit: time pressure in risky decisions","volume":"59","year":"2013","journal-title":"Management Science"},{"issue":"2","key":"key2020092502074572300_ref029","doi-asserted-by":"crossref","first-page":"311","DOI":"10.1037\/0022-3514.32.2.311","article-title":"The illusion of control","volume":"32","year":"1975","journal-title":"Journal of Personality and Social Psychology"},{"key":"key2020092502074572300_ref030","doi-asserted-by":"crossref","unstructured":"Li, J., Ou, X. and Rajagopalan, R. (2010), \u201cUncertainty and risk management in cyber situational awareness\u201d, in Jajodia, S., Liu, P., Swarup, V. and Wang, C. (Eds), Cyber Situational Awareness: Issues and Research, Springer, Boston, MA, pp. 51-68.","DOI":"10.1007\/978-1-4419-0140-8_4"},{"issue":"1","key":"key2020092502074572300_ref031","doi-asserted-by":"crossref","first-page":"293","DOI":"10.1007\/s10490-012-9341-5","article-title":"The rationality of emotions: a hybrid process model of decision-making under uncertainty","volume":"31","year":"2014","journal-title":"Asia Pacific Journal of Management"},{"key":"key2020092502074572300_ref032","doi-asserted-by":"crossref","first-page":"151","DOI":"10.1016\/j.chb.2016.11.065","article-title":"Individual differences and information security awareness","volume":"69","year":"2017","journal-title":"Computers in Human Behavior"},{"key":"key2020092502074572300_ref033","unstructured":"MacGibbon, A. (2016), \u201cReview of the events surrounding the 2016 ECENSUS: improving institutional cyber security culture and practices across the Australian government\u201d, Department of the Prime Minister and Cabinet, 13 October, available at: http:\/\/parlinfo.aph.gov.au\/parlInfo\/search\/display\/display.w3p;query=Id%3A%22publications%2Ftabledpapers%2Fa41f4f25-a08e-49a7-9b5f-d2c8af94f5c5%22 (accessed 18 April 2018)."},{"issue":"10","key":"key2020092502074572300_ref034","doi-asserted-by":"crossref","first-page":"13","DOI":"10.1016\/S1353-4858(15)30092-1","article-title":"The growth and evolution of DDoS","volume":"2015","year":"2015","journal-title":"Network Security"},{"issue":"4","key":"key2020092502074572300_ref035","doi-asserted-by":"crossref","first-page":"242","DOI":"10.1016\/j.cose.2011.01.001","article-title":"Modeling the behavior of users who are confronted with security mechanisms","volume":"30","year":"2011","journal-title":"Computers & Security"},{"issue":"2","key":"key2020092502074572300_ref036","doi-asserted-by":"crossref","first-page":"115","DOI":"10.1145\/1132026.1132027","article-title":"Inferring internet denial-of-service activity","volume":"24","year":"2006","journal-title":"ACM Transactions on Computer Systems"},{"issue":"6","key":"key2020092502074572300_ref037","doi-asserted-by":"crossref","first-page":"839","DOI":"10.1002\/jnr.23521","article-title":"The impact of stress in decision making in the context of uncertainty","volume":"93","year":"2015","journal-title":"Journal of Neuroscience Research"},{"issue":"1","key":"key2020092502074572300_ref038","first-page":"147","article-title":"Distributed denial of service (DDoS) resilience in cloud: review and conceptual cloud DDoS mitigation framework","volume":"67","year":"2016","journal-title":"Journal of Network and Computer Applications"},{"issue":"12","key":"key2020092502074572300_ref039","doi-asserted-by":"crossref","first-page":"873","DOI":"10.1109\/TSE.2004.94","article-title":"Cognitive heuristics in software engineering applying and extending anchoring and adjustment to artifact reuse","volume":"30","year":"2004","journal-title":"IEEE Transactions on Software Engineering"},{"key":"key2020092502074572300_ref040","doi-asserted-by":"crossref","unstructured":"Paul, C.L. and Whitley, K. (2013), \u201cA taxonomy of cyber awareness questions for the user-centered design of cyber situation awareness\u201d, in Louis, M. and Ioannis, A. (Eds), Human Aspects of Information Security, Privacy, and Trust, Springer-Verlag, Berlin, pp. 145-154.","DOI":"10.1007\/978-3-642-39345-7_16"},{"issue":"4","key":"key2020092502074572300_ref041","doi-asserted-by":"crossref","first-page":"597","DOI":"10.1016\/j.cose.2011.12.010","article-title":"Leveraging behavioral science to mitigate cyber security risk","volume":"31","year":"2012","journal-title":"Computers & Security"},{"issue":"4","key":"key2020092502074572300_ref042","doi-asserted-by":"crossref","first-page":"398","DOI":"10.1038\/nn2062","article-title":"Risky business: the neuroeconomics of decision making under uncertainty","volume":"11","year":"2008","journal-title":"Nature Neuroscience"},{"key":"key2020092502074572300_ref043","first-page":"32","article-title":"I am fine but you are not: optimistic bias and illusion of control on information security","year":"2005"},{"issue":"3","key":"key2020092502074572300_ref044","doi-asserted-by":"crossref","first-page":"412","DOI":"10.1177\/104973239900900310","article-title":"Data alive! The thinking behind NVivo","volume":"9","year":"1999","journal-title":"Qualitative Health Research"},{"issue":"2","key":"key2020092502074572300_ref045","doi-asserted-by":"crossref","first-page":"258","DOI":"10.1016\/j.actpsy.2007.05.004","article-title":"Inferences under time pressure: how opportunity costs affect strategy selection","volume":"127","year":"2008","journal-title":"Acta Psychologica"},{"issue":"1","key":"key2020092502074572300_ref046","first-page":"7","article-title":"Managing overconfidence","volume":"33","year":"1992","journal-title":"Sloan Management Review"},{"issue":"2","key":"key2020092502074572300_ref047","doi-asserted-by":"crossref","first-page":"111","DOI":"10.1002\/smj.4250050203","article-title":"Cognitive simplification processes in strategic decision-making","volume":"5","year":"1984","journal-title":"Strategic Management Journal"},{"key":"key2020092502074572300_ref048","unstructured":"SERC (2016a), \u201c2016 Census: issues of trust\u201d, Commonwealth of Australia, Canberra, ISBN 978-1-76010-491-7, available at: www.aph.gov.au\/Parliamentary_Business\/Committees\/Senate\/Economics\/2016Census\/Report (accessed 18 April 2018)."},{"key":"key2020092502074572300_ref049","unstructured":"SERC (2016b), \u201cIBM\u2019s response to senate inquiry into 2016 Census (submission 87)\u201d, Commonwealth of Australia, Canberra, available at: www.aph.gov.au\/DocumentStore.ashx?id=edba7500-936d-45fe-b87e-bb053f5e806c&subId=414131 (accessed 8 May 2018)."},{"key":"key2020092502074572300_ref050","unstructured":"SERC (2016c), \u201cNextGen\u2019s response to senate inquiry into 2016 Census (submission 88)\u201d, Commonwealth of Australia, Canberra, available at: www.aph.gov.au\/DocumentStore.ashx?id=019b5ea9-f2c5-4c9a-bfae-4e63c20f85ae&subId=414846 (accessed 8 May 2018)."},{"key":"key2020092502074572300_ref051","unstructured":"SERC (2016d), \u201cResponse of vocus communications limited to the submission of IBM Australia Limited (submission 89)\u201d, Commonwealth of Australia, Canberra, available at: www.aph.gov.au\/DocumentStore.ashx?id=9f58f27a-9b42-4de1-80f7-60e17edfb153&subId=414847 (accessed 8 May 2018)."},{"key":"key2020092502074572300_ref052","unstructured":"SERC (2016e), \u201cAnswers to questions on notice received from the ABS on 7 November 2016\u201d, Commonwealth of Australia, Canberra, available at: www.aph.gov.au\/DocumentStore.ashx?id=908e3472-d9d9-4870-bfb2-4fede0d3e2ea (accessed 8 May 2018)."},{"issue":"1","key":"key2020092502074572300_ref053","doi-asserted-by":"crossref","first-page":"99","DOI":"10.2307\/1884852","article-title":"A behavioral model of rational choice","volume":"69","year":"1955","journal-title":"Quarterly Journal of Economics"},{"issue":"4","key":"key2020092502074572300_ref054","first-page":"493","article-title":"Rational decision making in business organisations","volume":"69","year":"1979","journal-title":"The American Economic Review"},{"issue":"2","key":"key2020092502074572300_ref055","doi-asserted-by":"crossref","first-page":"215","DOI":"10.1016\/j.ijinfomgt.2015.11.009","article-title":"Information security management needs more holistic approach: a literature review","volume":"36","year":"2016","journal-title":"International Journal of Information Management"},{"issue":"2","key":"key2020092502074572300_ref056","doi-asserted-by":"crossref","first-page":"447","DOI":"10.1109\/TPDS.2013.146","article-title":"A system for denial-of-service attack detection based on multivariate correlation analysis","volume":"25","year":"2014","journal-title":"IEEE Transactions on Parallel and Distributed Systems"},{"issue":"4-6","key":"key2020092502074572300_ref057","first-page":"177","article-title":"Potential problems with information security risk assessments","volume":"24","year":"2015","journal-title":"Information Security Journal: A Global Perspective"},{"key":"key2020092502074572300_ref058","volume-title":"Business Research Methods: A Managerial Approach","year":"1999"},{"issue":"1","key":"key2020092502074572300_ref059","doi-asserted-by":"crossref","first-page":"157","DOI":"10.1111\/j.1540-5915.2007.00152.x","article-title":"The bounded rationality bias in managerial valuation of real options: theory and evidence from IT projects","volume":"38","year":"2007","journal-title":"Decision Sciences"},{"key":"key2020092502074572300_ref060","article-title":"The distributed nature of cyber situation awareness","year":"2012"},{"issue":"4","key":"key2020092502074572300_ref061","first-page":"301","article-title":"The interplay between theory and method","volume":"32","year":"2007","journal-title":"Academy of Management Review"},{"key":"key2020092502074572300_ref062","unstructured":"VeriSign (2016), \u201cVerisign distributed denial of service trends report\u201d, VeriSign, Vol. 3 No. 2, available at: www.nab.org\/cybersecurity\/Verisign-report-ddos-trends-Q22016.pdf"},{"key":"key2020092502074572300_ref063","volume-title":"Case Study Research and Design","year":"2009","edition":"4th ed."},{"issue":"2","key":"key2020092502074572300_ref064","doi-asserted-by":"crossref","first-page":"179","DOI":"10.1016\/j.obhdp.2012.03.005","article-title":"Decision making under time pressure, modeled in a prospect theory framework","volume":"118","year":"2012","journal-title":"Organizational Behavior and Human Decision Processes"},{"issue":"2","key":"key2020092502074572300_ref065","doi-asserted-by":"crossref","first-page":"93","DOI":"10.1002\/(SICI)1099-0771(199906)12:2<93::AID-BDM311>3.0.CO;2-S","article-title":"Anticipated regret, expected feedback and behavioral decision making","volume":"12","year":"1999","journal-title":"Journal of Behavioral Decision Making"}],"container-title":["Information Technology &amp; People"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.emerald.com\/insight\/content\/doi\/10.1108\/ITP-11-2017-0390\/full\/xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.emerald.com\/insight\/content\/doi\/10.1108\/ITP-11-2017-0390\/full\/html","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,24]],"date-time":"2025-07-24T21:55:55Z","timestamp":1753394155000},"score":1,"resource":{"primary":{"URL":"http:\/\/www.emerald.com\/itp\/article\/32\/1\/171-188\/183213"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,2,4]]},"references-count":65,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2019,2,4]]}},"alternative-id":["10.1108\/ITP-11-2017-0390"],"URL":"https:\/\/doi.org\/10.1108\/itp-11-2017-0390","relation":{},"ISSN":["0959-3845"],"issn-type":[{"value":"0959-3845","type":"print"}],"subject":[],"published":{"date-parts":[[2019,2,4]]}}}