{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,7]],"date-time":"2026-04-07T19:19:29Z","timestamp":1775589569962,"version":"3.50.1"},"reference-count":35,"publisher":"Frontiers Media SA","license":[{"start":{"date-parts":[[2023,6,15]],"date-time":"2023-06-15T00:00:00Z","timestamp":1686787200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100001409","name":"Department of Science and Technology, Ministry of Science and Technology, India","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001409","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["frontiersin.org"],"crossmark-restriction":true},"short-container-title":["Front. Big Data"],"abstract":"<jats:p>Prior research in cyber deception has investigated the effectiveness of the timing of deception on human decisions using simulation tools. However, there exists a gap in the literature on how the availability of subnets and port-hardening influence human decisions to attack a system. We tested the influence of subnets and port-hardening on human attack decisions in a simulated environment using the HackIT tool. Availability of subnets (present\/absent) within a network and port-hardening (easy-to-attack\/hard-to-attack) were varied across four between-subject conditions (<jats:italic>N<\/jats:italic> = 30 in each condition): with-subnet with easy-to-attack, with-subnet with hard-to-attack, without-subnet with easy-to-attack, and without-subnet with hard-to-attack. In with-subnet conditions, 40 systems were connected in a hybrid topology network with ten subnets connected linearly, and each subnet contained four connected systems. In without-subnet conditions, all 40 systems were connected in a bus topology. In hard-to-attack (easy-to-attack) conditions, the probabilities of successfully attacking real systems and honeypots were kept low (high) and high (low), respectively. In an experiment, human participants were randomly assigned to one of the four conditions to attack as many real systems as possible and steal credit card information. Results revealed a significant decrease in the proportion of real system attacks in the availability of subnetting and port hardening within the network. Also, more honeypots were attacked in with-subnet conditions than without-subnet conditions. Moreover, a significantly lower proportion of real systems were attacked in the port-hardened condition. This research highlights the implications of subnetting and port-hardening with honeypots to reduce real system attacks. These findings are relevant in developing advanced intrusion detection systems trained on hackers' behavior.<\/jats:p>","DOI":"10.3389\/fdata.2023.988007","type":"journal-article","created":{"date-parts":[[2023,6,15]],"date-time":"2023-06-15T05:41:04Z","timestamp":1686807664000},"update-policy":"https:\/\/doi.org\/10.3389\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Does subnetting and port hardening influence human adversarial decisions? An investigation via a HackIT tool"],"prefix":"10.3389","volume":"6","author":[{"given":"Shashank","family":"Uttrani","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Palvi","family":"Aggarwal","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Varun","family":"Dutt","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1965","published-online":{"date-parts":[[2023,6,15]]},"reference":[{"key":"B1","doi-asserted-by":"publisher","first-page":"1098","DOI":"10.1109\/TNSM.2017.2724239","article-title":"Deceiving network reconnaissance using SDN-based virtual topologies","volume":"14","author":"Achleitner","year":"2017","journal-title":"IEEE Transact. Network Serv. Manag."},{"key":"B2","doi-asserted-by":"crossref","DOI":"10.1109\/COMPSAC.2016.52","article-title":"An Augmented Cybersecurity Behavioral Research Model","volume-title":"2016 IEEE 40th Annual Computer Software and Applications Conference (COMPSAC)","author":"Addae","year":"2016"},{"key":"B3","volume-title":"HackIT: A Human-in-the-Loop Simulation Tool for Realistic Cyber Deception Experiments","author":"Aggarwal","year":"2020"},{"key":"B4","volume-title":"Cyber-Security: Role of Deception in Cyber-Attack Detection","author":"Aggarwal","year":"2016"},{"key":"B5","doi-asserted-by":"crossref","DOI":"10.1109\/DSN.2012.6263942","article-title":"Time-efficient and cost-effective network hardening using attack graphs","volume-title":"IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN 2012)","author":"Albanese","year":"2012"},{"key":"B6","doi-asserted-by":"crossref","DOI":"10.1109\/DSN-W.2018.00016","article-title":"Cross-stack threat sensing for cyber security and resilience","author":"Araujo","year":"2018","journal-title":"2018 48th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks Workshops (DSN-W)"},{"key":"B7","doi-asserted-by":"crossref","DOI":"10.1109\/CYCONUS.2016.7836614","article-title":"Cyber workforce development using a behavioral cybersecurity paradigm","author":"Caulkins","year":"2016","journal-title":"2016 International Conference on Cyber Conflict (CyCon U.S.)"},{"key":"B8","doi-asserted-by":"crossref","DOI":"10.1109\/MILCOM.2016.7795481","article-title":"CyberVAN: a cyber security virtual assured network testbed","volume-title":"MILCOM 2016\u20132016 IEEE Military Communications Conference","author":"Chadha","year":"2016"},{"key":"B9","doi-asserted-by":"crossref","DOI":"10.1145\/3085228.3085233","volume-title":"Cybersecurity Innovation in Government: A Case Study of U.S. Pentagon's Vulnerability Reward Program. Proceedings of the 18th Annual International Conference on Digital Government Research","author":"Chatfield","year":"2017"},{"key":"B10","volume-title":"Hardening Persona \u2013 Improving Federated Web Login Proceedings 2014 Network and Distributed System Security Symposium","author":"Dietz","year":"2014"},{"key":"B11","doi-asserted-by":"publisher","first-page":"1227","DOI":"10.1016\/j.chb.02006","article-title":"Making instance-based learning theory usable and understandable: the instance-based learning tool","volume":"28","author":"Dutt","year":"2012","journal-title":"Comput. Human Behav."},{"key":"B12","volume-title":"Discovering Statistics using IBM SPSS Statistics","author":"Field","year":"2013"},{"key":"B13","doi-asserted-by":"publisher","first-page":"40","DOI":"10.1109\/MSP.2011.180","article-title":"Basing cybersecurity training on user perceptions","volume":"10","author":"Furman","year":"2012","journal-title":"IEEE Sec. Privacy"},{"key":"B14","doi-asserted-by":"publisher","first-page":"591","DOI":"10.1016\/S0364-0213(03)00031-4","article-title":"Instance-based learning in dynamic decision making","volume":"27","author":"Gonzalez","year":"2003","journal-title":"Cogn. Sci."},{"key":"B15","doi-asserted-by":"publisher","first-page":"102196","DOI":"10.1016\/j.cose.2021.102196","article-title":"Cyber security risk assessment for seaports: A case study of a container port","volume":"103","author":"Gunes","year":"2021","journal-title":"Comput. Secur."},{"key":"B16","article-title":"\u201cToward a UCM-based approach for recovering system availability requirements from execution traces,\u201d","volume-title":"System Analysis and Modeling","author":"Hassine","year":"2014"},{"key":"B17","volume-title":"Networks in a Digital World: A Cybernetics Perspective","author":"Jackson","year":"2015"},{"key":"B18","first-page":"3334","article-title":"Honeypots: the need of network security","volume":"5","author":"Kambow","year":"2014","journal-title":"Int. J. Comp. Sci. Inform. Technol."},{"key":"B19","doi-asserted-by":"publisher","first-page":"2385","DOI":"10.3389\/fpsyg.2020.535803","article-title":"Influence of network size on adversarial decisions in a deception game involving honeypots [Original Research]","volume":"11","author":"Katakwar","year":"2020","journal-title":"Front. Psychol."},{"key":"B20","author":"Kelly","year":"2019","journal-title":"Adversarially Adapting Deceptive Views and Reconnaissance Scans on a Software Defined Network"},{"key":"B21","doi-asserted-by":"crossref","DOI":"10.1109\/CDC.2014.7040216","article-title":"Role of network topology in cybersecurity","volume-title":"53rd IEEE Conference on Decision and Control","author":"La","year":"2014"},{"key":"B22","doi-asserted-by":"publisher","first-page":"1","DOI":"10.3389\/fpsyg.2020.00011","article-title":"Cyber security: effects of penalizing defenders in cyber-security games via experimentation and computational modeling [original research]","volume":"11","author":"Maqbool","year":"2020","journal-title":"Front. Psychol."},{"key":"B23","doi-asserted-by":"publisher","first-page":"1","DOI":"10.3758\/s13428-011-0124-6","article-title":"Conducting behavioral research on Amazon's Mechanical Turk","volume":"44","author":"Mason","year":"2012","journal-title":"Behav. Res. Method"},{"key":"B24","first-page":"42","article-title":"\u201cHoneypots,\u201d","volume-title":"Automatic Defense Against Zero-day Polymorphic Worms in Communication Networks","author":"Mohammed","year":"2013"},{"key":"B25","doi-asserted-by":"crossref","DOI":"10.1007\/0-387-25660-1_20","article-title":"\u201cAutomatically hardening web applications using precise tainting,\u201d","volume-title":"Security and Privacy in the Age of Ubiquitous Computing Boston, MA","author":"Nguyen-Tuong","year":"2005"},{"key":"B26","author":"Pu","year":"2011","journal-title":"Hypergraph Clustering for Better Network Traffic Inspection The 3rd Workshop on Intelligent Security at IJCAI"},{"key":"B27","doi-asserted-by":"publisher","first-page":"35","DOI":"10.1016\/j.chb.02050","article-title":"The dark side of social networking sites: understanding phishing risks","volume":"60","author":"Silic","year":"2016","journal-title":"Comp. Human Behav."},{"key":"B28","doi-asserted-by":"crossref","DOI":"10.1109\/MLDS.2017.13","article-title":"Modeling decisions in games using reinforcement learning","author":"Singal","year":"2017","journal-title":"2017 International Conference on Machine Learning and Data Science (MLDS)"},{"key":"B29","author":"Spitzner","year":"2003","journal-title":"Honeypots: Catching the Insider Threat Proceedings of the 19th Annual Computer Security Applications Conference"},{"key":"B30","doi-asserted-by":"crossref","DOI":"10.1109\/TPS-ISA48467.2019.00022","article-title":"Countering Malware Via Decoy Processes with Improved Resource Utilization Consistency","volume-title":"2019 First IEEE International Conference on Trust, Privacy and Security in Intelligent Systems and Applications (TPS-ISA)","author":"Sutton","year":"2019"},{"key":"B31","volume-title":"Hardening Linux","author":"Turnbull","year":"2005"},{"key":"B32","volume-title":"An Overview of the OMNeT","author":"Varga","year":"2008"},{"key":"B33","doi-asserted-by":"publisher","first-page":"691","DOI":"10.3389.\/fpsyg.2018.00691","article-title":"Simulations in cyber-security: a review of cognitive modeling of network attackers, defenders, and users","volume":"9","author":"Veksler","year":"2018","journal-title":"Front. Psychol."},{"key":"B34","doi-asserted-by":"crossref","DOI":"10.1109\/NCA.2006.23","article-title":"Experience using active and passive mapping for network situational awareness","volume-title":"Fifth IEEE International Symposium on Network Computing and Applications (NCA'06)","author":"Webster","year":"2006"},{"key":"B35","doi-asserted-by":"publisher","first-page":"721","DOI":"10.1146\/annurev.genet.36.050802.093940","article-title":"Estimating F-statistics","volume":"36","author":"Weir","year":"2002","journal-title":"Annu Rev Genet"}],"container-title":["Frontiers in Big Data"],"original-title":[],"link":[{"URL":"https:\/\/www.frontiersin.org\/articles\/10.3389\/fdata.2023.988007\/full","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,6,15]],"date-time":"2023-06-15T05:41:24Z","timestamp":1686807684000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.frontiersin.org\/articles\/10.3389\/fdata.2023.988007\/full"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,6,15]]},"references-count":35,"alternative-id":["10.3389\/fdata.2023.988007"],"URL":"https:\/\/doi.org\/10.3389\/fdata.2023.988007","relation":{},"ISSN":["2624-909X"],"issn-type":[{"value":"2624-909X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,6,15]]},"article-number":"988007"}}