{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T21:00:34Z","timestamp":1777669234912,"version":"3.51.4"},"reference-count":26,"publisher":"SAGE Publications","issue":"2","license":[{"start":{"date-parts":[[2021,9,20]],"date-time":"2021-09-20T00:00:00Z","timestamp":1632096000000},"content-version":"vor","delay-in-days":365,"URL":"http:\/\/www.sagepub.com\/licence-information-for-chorus"}],"funder":[{"DOI":"10.13039\/501100008628","name":"Ministry of Electronics and Information technology","doi-asserted-by":"publisher","award":["IITM\/DeitY-MLA\/ASO\/77"],"award-info":[{"award-number":["IITM\/DeitY-MLA\/ASO\/77"]}],"id":[{"id":"10.13039\/501100008628","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001409","name":"department of science and technology, ministry of science and technology, india","doi-asserted-by":"publisher","award":["SR\/CSRI\/28\/2013(G); IITM\/DST-ICPS\/VD\/251"],"award-info":[{"award-number":["SR\/CSRI\/28\/2013(G); IITM\/DST-ICPS\/VD\/251"]}],"id":[{"id":"10.13039\/501100001409","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100006754","name":"Army Research Laboratory","doi-asserted-by":"publisher","award":["W911NF-13-2-0045"],"award-info":[{"award-number":["W911NF-13-2-0045"]}],"id":[{"id":"10.13039\/100006754","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["journals.sagepub.com"],"crossmark-restriction":true},"short-container-title":["Hum Factors"],"published-print":{"date-parts":[[2022,3]]},"abstract":"<jats:sec>\n                    <jats:title>Objective<\/jats:title>\n                    <jats:p>We aim to learn about the cognitive mechanisms governing the decisions of attackers and defenders in cybersecurity involving intrusion detection systems (IDSs).<\/jats:p>\n                  <\/jats:sec>\n                  <jats:sec>\n                    <jats:title>Background<\/jats:title>\n                    <jats:p>Prior research has experimentally studied the role of the presence and accuracy of IDS alerts on attacker\u2019s and defender\u2019s decisions using a game-theoretic approach. However, little is known about the cognitive mechanisms that govern these decisions.<\/jats:p>\n                  <\/jats:sec>\n                  <jats:sec>\n                    <jats:title>Method<\/jats:title>\n                    <jats:p>To investigate the cognitive mechanisms governing the attacker\u2019s and defender\u2019s decisions in the presence of IDSs of different accuracies, instance-based learning (IBL) models were developed. One model (NIDS) disregarded the IDS alerts and one model (IDS) considered them in the instance structure. Both the IDS and NIDS models were trained in an existing dataset where IDSs were either absent or present and they possessed different accuracies. The calibrated IDS model was tested in a newly collected test dataset where IDSs were present 50% of the time and they possessed different accuracies.<\/jats:p>\n                  <\/jats:sec>\n                  <jats:sec>\n                    <jats:title>Results<\/jats:title>\n                    <jats:p>Both the IDS and NIDS models were able to account for human decisions in the training dataset, where IDS was absent or present and it possessed different accuracies. However, the IDS model could accurately predict the decision-making in only one of the several IDS accuracy conditions in the test dataset.<\/jats:p>\n                  <\/jats:sec>\n                  <jats:sec>\n                    <jats:title>Conclusions<\/jats:title>\n                    <jats:p>Cognitive models like IBL may provide some insights regarding the cognitive mechanisms governing the decisions of attackers and defenders in conditions not involving IDSs or IDSs of different accuracies.<\/jats:p>\n                  <\/jats:sec>\n                  <jats:sec>\n                    <jats:title>Application<\/jats:title>\n                    <jats:p>IBL models may be helpful for penetration testing exercises in scenarios involving IDSs of different accuracies.<\/jats:p>\n                  <\/jats:sec>","DOI":"10.1177\/0018720820945425","type":"journal-article","created":{"date-parts":[[2020,9,20]],"date-time":"2020-09-20T10:08:51Z","timestamp":1600596531000},"page":"343-358","update-policy":"https:\/\/doi.org\/10.1177\/sage-journals-update-policy","source":"Crossref","is-referenced-by-count":2,"title":["Learning About the Effects of Alert Uncertainty in Attack and Defend Decisions via Cognitive Modeling"],"prefix":"10.1177","volume":"64","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2488-8959","authenticated-orcid":false,"given":"Palvi","family":"Aggarwal","sequence":"first","affiliation":[{"name":"Carnegie Mellon University, Pennsylvania, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Frederic","family":"Moisan","sequence":"additional","affiliation":[{"name":"AIM Institute, EM Lyon Business School, GATE"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Cleotilde","family":"Gonzalez","sequence":"additional","affiliation":[{"name":"Carnegie Mellon University, Pennsylvania, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Varun","family":"Dutt","sequence":"additional","affiliation":[{"name":"Indian Institute of Technology Mandi, Himachal Pradesh, India"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"179","published-online":{"date-parts":[[2020,9,20]]},"reference":[{"key":"bibr1-0018720820945425","first-page":"1","volume-title":"2017 International conference on cyber situational awareness, data analytics and assessment (Cyber SA","author":"Aggarwal P."},{"key":"bibr2-0018720820945425","doi-asserted-by":"publisher","DOI":"10.22619\/IJCSA.2018.100118"},{"key":"bibr27-0018720820945425","volume-title":"Atomic components of thought","author":"Anderson J. R.","year":"1998"},{"key":"bibr3-0018720820945425","doi-asserted-by":"publisher","DOI":"10.5121\/ijnsa.2011.3513"},{"key":"bibr4-0018720820945425","doi-asserted-by":"publisher","DOI":"10.1177\/154193120204601712"},{"key":"bibr5-0018720820945425","doi-asserted-by":"publisher","DOI":"10.1177\/0018720816682648"},{"key":"bibr7-0018720820945425","doi-asserted-by":"publisher","DOI":"10.1177\/0018720812464045"},{"key":"bibr8-0018720820945425","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-41932-9_9"},{"key":"bibr9-0018720820945425","doi-asserted-by":"publisher","DOI":"10.1177\/1541931213571085"},{"key":"bibr12-0018720820945425","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-11391-3_6"},{"key":"bibr11-0018720820945425","doi-asserted-by":"publisher","DOI":"10.1037\/a0024558"},{"key":"bibr10-0018720820945425","doi-asserted-by":"publisher","DOI":"10.1207\/s15516709cog2704_2"},{"key":"bibr13-0018720820945425","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4419-0140-8"},{"key":"bibr26-0018720820945425","doi-asserted-by":"publisher","DOI":"10.1016\/j.orl.2005.09.009"},{"key":"bibr14-0018720820945425","doi-asserted-by":"publisher","DOI":"10.1002\/bdm.722"},{"key":"bibr15-0018720820945425","doi-asserted-by":"publisher","DOI":"10.1177\/1541931213571084"},{"key":"bibr25-0018720820945425","unstructured":"McKelvey R. D., McLennan A. M., Turocy T. L. (2006). Gambit: Software tools for game theory."},{"key":"bibr16-0018720820945425","doi-asserted-by":"publisher","DOI":"10.1518\/hfes.46.2.196.37335"},{"key":"bibr17-0018720820945425","doi-asserted-by":"publisher","DOI":"10.1177\/0018720813512865"},{"key":"bibr18-0018720820945425","doi-asserted-by":"publisher","DOI":"10.1109\/65.283931"},{"key":"bibr19-0018720820945425","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2010.35"},{"key":"bibr20-0018720820945425","first-page":"151","volume":"32","author":"Sawyer B. D.","year":"2015","journal-title":"American Intelligence Journal"},{"key":"bibr21-0018720820945425","doi-asserted-by":"publisher","DOI":"10.1177\/0018720818780472"},{"key":"bibr22-0018720820945425","doi-asserted-by":"publisher","DOI":"10.1109\/MLDS.2017.18"},{"key":"bibr24-0018720820945425","doi-asserted-by":"publisher","DOI":"10.1177\/1541931214581078"},{"key":"bibr23-0018720820945425","doi-asserted-by":"publisher","DOI":"10.1177\/1541931213601066"}],"container-title":["Human Factors: The Journal of the Human Factors and Ergonomics Society"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/journals.sagepub.com\/doi\/pdf\/10.1177\/0018720820945425","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/journals.sagepub.com\/doi\/full-xml\/10.1177\/0018720820945425","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/journals.sagepub.com\/doi\/pdf\/10.1177\/0018720820945425","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/journals.sagepub.com\/doi\/pdf\/10.1177\/0018720820945425","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T07:52:37Z","timestamp":1777449157000},"score":1,"resource":{"primary":{"URL":"https:\/\/journals.sagepub.com\/doi\/10.1177\/0018720820945425"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,9,20]]},"references-count":26,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2022,3]]}},"alternative-id":["10.1177\/0018720820945425"],"URL":"https:\/\/doi.org\/10.1177\/0018720820945425","relation":{},"ISSN":["0018-7208","1547-8181"],"issn-type":[{"value":"0018-7208","type":"print"},{"value":"1547-8181","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,9,20]]}}}