标题： 风险心理学与网络攻击策略 显示英文标题

标题： Risk Psychology & Cyber-Attack Tactics

摘要： 我们考察了测量的认知过程是否可以预测网络攻击行为。 我们分析了包括心理量表反应和标记的攻击行为的数据，这些数据来自对模拟企业网络进行红队操作的网络安全专业人员。 我们采用了多级混合效应泊松回归，将技术计数嵌套在参与者内部，以测试认知过程是否可以预测特定技术的使用。 这些量表显著预测了技术的使用，但效果因技术而异，而不是统一的。 专业知识水平或实验处理条件均未显著预测技术模式，表明认知过程可能是技术选择的更强驱动因素，而非培训或经验。 这些发现表明个体认知差异塑造了网络攻击行为，并支持基于心理学的防御策略的发展。 显示英文摘要

摘要： We examine whether measured cognitive processes predict cyber-attack behavior. We analyzed data that included psychometric scale responses and labeled attack behaviors from cybersecurity professionals who conducted red-team operations against a simulated enterprise network. We employed multilevel mixed-effects Poisson regression with technique counts nested within participants to test whether cognitive processes predicted technique-specific usage. The scales significantly predicted technique use, but effects varied by technique rather than operating uniformly. Neither expertise level nor experimental treatment condition significantly predicted technique patterns, indicating that cognitive processes may be stronger drivers of technique selection than training or experience. These findings demonstrate that individual cognitive differences shape cyber-attack behavior and support the development of psychology-informed defense strategies.