{"id":"https://openalex.org/W7223879601","doi":"https://doi.org/10.1177/00375497261490937","title":"Simulating Trust Dynamics Model for Interaction between Human and Intrusion Detection System under Hybrid Denial-of-Service and Spearphishing Campaigns","display_name":"Simulating Trust Dynamics Model for Interaction between Human and Intrusion Detection System under Hybrid Denial-of-Service and Spearphishing Campaigns","publication_year":2026,"publication_date":"2026-10-27","ids":{"openalex":"https://openalex.org/W7223879601","doi":"https://doi.org/10.1177/00375497261490937"},"language":"en","primary_location":{"id":"doi:10.1177/00375497261490937","doi":"https://doi.org/10.1177/00375497261490937","is_oa":false,"landing_page_url":"https://doi.org/10.1177/00375497261490937","pdf_url":null,"source":{"id":"https://openalex.org/S32573412","display_name":"SIMULATION","issn_l":"0037-5497","issn":["0037-5497","1741-3133"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","cwts-core","dongbi-d","jufo-1","norway-1","poland-70","russia-white-list-2"],"host_organization":"https://openalex.org/P4310320017","host_organization_name":"SAGE Publishing","host_organization_lineage":["https://openalex.org/P4310320017"],"host_organization_lineage_names":["SAGE Publishing"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"SIMULATION","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5078598569","display_name":"Jeongkeun Shin","orcid":"https://orcid.org/0009-0006-1569-6129","observed_orcids":["https://orcid.org/0009-0006-1569-6129"]},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Jeongkeun Shin","raw_affiliation_strings":["CASOS Center, Carnegie Mellon University, Pittsburgh, PA, USA","Software and Societal Systems Department (S3D), Carnegie Mellon University School of Computer Science, Pittsburgh, PA, USA"],"raw_orcid":"https://orcid.org/0009-0006-1569-6129","affiliations":[{"raw_affiliation_string":"CASOS Center, Carnegie Mellon University, Pittsburgh, PA, USA","institution_ids":["https://openalex.org/I74973139"]},{"raw_affiliation_string":"Software and Societal Systems Department (S3D), Carnegie Mellon University School of Computer Science, Pittsburgh, PA, USA","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083212338","display_name":"Larry Richard Carley","orcid":"https://orcid.org/0000-0003-3945-9110","observed_orcids":["https://orcid.org/0000-0003-3945-9110"]},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"L. Richard Carley","raw_affiliation_strings":["CASOS Center, Carnegie Mellon University, Pittsburgh, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CASOS Center, Carnegie Mellon University, Pittsburgh, PA, USA","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085927300","display_name":"Kathleen M. Carley","orcid":"https://orcid.org/0000-0002-6356-0238","observed_orcids":["https://orcid.org/0000-0002-6356-0238"]},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kathleen M. Carley","raw_affiliation_strings":["CASOS Center, Carnegie Mellon University, Pittsburgh, PA, USA","Software and Societal Systems Department (S3D), Carnegie Mellon University School of Computer Science, Pittsburgh, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CASOS Center, Carnegie Mellon University, Pittsburgh, PA, USA","institution_ids":["https://openalex.org/I74973139"]},{"raw_affiliation_string":"Software and Societal Systems Department (S3D), Carnegie Mellon University School of Computer Science, Pittsburgh, PA, USA","institution_ids":["https://openalex.org/I74973139"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5078598569"],"corresponding_institution_ids":["https://openalex.org/I74973139"],"apc_list":{"value":4150,"currency":"USD","value_usd":4150},"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.82308899,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.7451000213623047,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.7451000213623047,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.24120000004768372,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10525","display_name":"Human-Automation Interaction and Safety","score":0.0020000000949949026,"subfield":{"id":"https://openalex.org/subfields/3307","display_name":"Human Factors and Ergonomics"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/operator-trust","display_name":"operator trust","score":0.7480000257492065},{"id":"https://openalex.org/keywords/trust-dynamics","display_name":"trust dynamics","score":0.5699999928474426},{"id":"https://openalex.org/keywords/agent-based-modeling","display_name":"agent-based modeling","score":0.6060000061988831},{"id":"https://openalex.org/keywords/denial-of-service-attacks","display_name":"denial-of-service attacks","score":0.8399999737739563},{"id":"https://openalex.org/keywords/data-exfiltration","display_name":"data exfiltration","score":0.8429999947547913},{"id":"https://openalex.org/keywords/advanced-persistent-threats","display_name":"advanced persistent threats","score":0.8569999933242798},{"id":"https://openalex.org/keywords/false-positive-results","display_name":"false positives","score":0.5709999799728394},{"id":"https://openalex.org/keywords/operator-fatigue","display_name":"operator fatigue","score":0.7630000114440918},{"id":"https://openalex.org/keywords/nsl-kdd","display_name":"NSL-KDD dataset","score":0.7170000076293945},{"id":"https://openalex.org/keywords/unsw-nb15","display_name":"UNSW-NB15","score":0.9240000247955322},{"id":"https://openalex.org/keywords/server-downtime","display_name":"server downtime","score":0.3190000057220459}],"concepts":[{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7639999985694885},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7595999836921692},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.671500027179718},{"id":"https://openalex.org/C180591934","wikidata":"https://www.wikidata.org/wiki/Q1253369","display_name":"Downtime","level":2,"score":0.6600000262260437},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.46779999136924744},{"id":"https://openalex.org/C17020691","wikidata":"https://www.wikidata.org/wiki/Q139677","display_name":"Operator (biology)","level":5,"score":0.4650000035762787},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.4580000042915344},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.44190001487731934},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.43619999289512634},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.41909998655319214},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.41350001096725464},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.3970000147819519},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.364300012588501},{"id":"https://openalex.org/C58489278","wikidata":"https://www.wikidata.org/wiki/Q1172284","display_name":"Data set","level":2,"score":0.3522000014781952},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.3479999899864197},{"id":"https://openalex.org/C2777189325","wikidata":"https://www.wikidata.org/wiki/Q61022630","display_name":"Officer","level":2,"score":0.3458000123500824},{"id":"https://openalex.org/C77052588","wikidata":"https://www.wikidata.org/wiki/Q644307","display_name":"Constant false alarm rate","level":2,"score":0.3352999985218048},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.33160001039505005},{"id":"https://openalex.org/C141353440","wikidata":"https://www.wikidata.org/wiki/Q182221","display_name":"Fuse (electrical)","level":2,"score":0.32199999690055847},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.28459998965263367},{"id":"https://openalex.org/C133462117","wikidata":"https://www.wikidata.org/wiki/Q4929239","display_name":"Data collection","level":2,"score":0.2687999904155731},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.26460000872612},{"id":"https://openalex.org/C52001869","wikidata":"https://www.wikidata.org/wiki/Q812530","display_name":"Naive Bayes classifier","level":3,"score":0.26030001044273376},{"id":"https://openalex.org/C137524506","wikidata":"https://www.wikidata.org/wiki/Q2247688","display_name":"Anomaly-based intrusion detection system","level":3,"score":0.257099986076355},{"id":"https://openalex.org/C2778476105","wikidata":"https://www.wikidata.org/wiki/Q628539","display_name":"Workload","level":2,"score":0.2551000118255615},{"id":"https://openalex.org/C99844830","wikidata":"https://www.wikidata.org/wiki/Q102441924","display_name":"Scaling","level":2,"score":0.2540000081062317},{"id":"https://openalex.org/C44154836","wikidata":"https://www.wikidata.org/wiki/Q45045","display_name":"Simulation","level":1,"score":0.2531000077724457},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.25040000677108765}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1177/00375497261490937","doi":"https://doi.org/10.1177/00375497261490937","is_oa":false,"landing_page_url":"https://doi.org/10.1177/00375497261490937","pdf_url":null,"source":{"id":"https://openalex.org/S32573412","display_name":"SIMULATION","issn_l":"0037-5497","issn":["0037-5497","1741-3133"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","cwts-core","dongbi-d","jufo-1","norway-1","poland-70","russia-white-list-2"],"host_organization":"https://openalex.org/P4310320017","host_organization_name":"SAGE Publishing","host_organization_lineage":["https://openalex.org/P4310320017"],"host_organization_lineage_names":["SAGE Publishing"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"SIMULATION","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":51,"referenced_works":["https://openalex.org/W91443777","https://openalex.org/W1516506771","https://openalex.org/W1566376227","https://openalex.org/W1630964756","https://openalex.org/W1737333480","https://openalex.org/W1942126522","https://openalex.org/W1985987493","https://openalex.org/W2010158189","https://openalex.org/W2010657328","https://openalex.org/W2025434313","https://openalex.org/W2053142757","https://openalex.org/W2060240429","https://openalex.org/W2060256879","https://openalex.org/W2063052894","https://openalex.org/W2068714596","https://openalex.org/W2096130600","https://openalex.org/W2099940443","https://openalex.org/W2110575096","https://openalex.org/W2120969335","https://openalex.org/W2133990480","https://openalex.org/W2142530516","https://openalex.org/W2143074722","https://openalex.org/W2151040995","https://openalex.org/W2156204309","https://openalex.org/W2296509296","https://openalex.org/W2625602624","https://openalex.org/W2740755977","https://openalex.org/W2912934387","https://openalex.org/W2958285686","https://openalex.org/W3106741970","https://openalex.org/W3130493744","https://openalex.org/W3139151242","https://openalex.org/W3140951851","https://openalex.org/W3171364527","https://openalex.org/W3211515646","https://openalex.org/W4214699222","https://openalex.org/W4239510810","https://openalex.org/W4243342770","https://openalex.org/W4285049582","https://openalex.org/W4296139544","https://openalex.org/W4386790284","https://openalex.org/W4387937774","https://openalex.org/W4391381659","https://openalex.org/W4392270685","https://openalex.org/W4403864198","https://openalex.org/W4404120897","https://openalex.org/W4405687112","https://openalex.org/W4408836053","https://openalex.org/W4412423696","https://openalex.org/W4415044060","https://openalex.org/W7133345463"],"related_works":["https://openalex.org/W3133624139","https://openalex.org/W166575908","https://openalex.org/W1894557176","https://openalex.org/W4417519775","https://openalex.org/W7212172464","https://openalex.org/W7213450662","https://openalex.org/W2991467781","https://openalex.org/W3176760637","https://openalex.org/W2530000518","https://openalex.org/W2118831445"],"abstract_inverted_index":{"Machine":[0],"learning-based":[1],"intrusion":[2,39],"detection":[3,40],"systems":[4],"are":[5],"compared":[6],"by":[7,85,154],"classification":[8],"metrics,":[9],"which":[10],"do":[11],"not":[12],"capture":[13],"how":[14],"sequences":[15],"of":[16,31,157,166],"detector":[17,171,173],"outputs":[18],"shape":[19],"operator":[20,182],"trust":[21,73,90,147],"and":[22,37,65,68,91,106,117,132,139,162,181],"organizational":[23],"damage.":[24],"This":[25],"study":[26],"develops":[27],"an":[28,38,100,120],"agent-based":[29],"model":[30,55],"the":[32,44,70,75,78,86,92,155,163,170,179,192,208,212],"interaction":[33],"between":[34,88],"a":[35,144,150],"human":[36],"system":[41],"(IDS)":[42],"in":[43],"Organization":[45],"Simulation":[46],"In":[47],"Response":[48],"to":[49,149],"Intrusion":[50],"Strategies":[51],"(OSIRIS)":[52],"framework.":[53],"The":[54],"separates":[56],"true":[57,63],"positives,":[58,60],"false":[59,61,176],"negatives,":[62,64],"attack-type":[66],"misclassifications,":[67],"updates":[69],"security":[71],"officer\u2019s":[72],"on":[74,115,211],"four":[76],"outcomes":[77],"officer":[79],"actually":[80],"experiences,":[81],"scaling":[82],"each":[83],"change":[84],"distance":[87],"current":[89],"level":[93],"that":[94,124],"outcome":[95],"supports.":[96],"Trust":[97],"gates":[98],"whether":[99],"alert":[101],"is":[102,134],"investigated,":[103],"while":[104],"fatigue":[105,183],"job":[107],"performance":[108],"govern":[109],"response":[110],"success.":[111],"Six":[112],"detectors":[113],"trained":[114],"NSL-KDD":[116],"UNSW-NB15":[118],"face":[119],"APT":[121],"28-inspired":[122],"campaign":[123],"combines":[125],"denial-of-service":[126],"with":[127,169],"spearphishing":[128],"for":[129],"data":[130,141],"exfiltration,":[131],"damage":[133,167],"measured":[135],"as":[136,191],"server":[137],"downtime":[138],"exfiltrated":[140],"volume.":[142],"Across":[143],"full-factorial":[145],"design,":[146],"converges":[148],"fixed":[151],"point":[152],"set":[153],"balance":[156],"confirming":[158],"against":[159],"disconfirming":[160],"outcomes,":[161],"dominant":[164],"determinant":[165],"shifts":[168],"regime:":[172],"identifies":[174],"when":[175],"alarms":[177],"saturate":[178],"operator,":[180],"otherwise.":[184],"Accuracy":[185],"predicts":[186],"protection":[187],"only":[188],"within":[189],"limits,":[190],"most":[193],"accurate":[194,202],"classifier":[195],"allows":[196],"more":[197],"exfiltration":[198,213],"than":[199],"three":[200],"less":[201],"ones":[203],"because":[204],"it":[205],"never":[206],"monitors":[207],"techniques":[209],"lying":[210],"path.":[214]},"counts_by_year":[],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2026-10-28T00:00:00"}