SCVI: Bridging Social and Cyber Dimensions for Comprehensive Vulnerability Assessment

View on arXiv ← Back to list

Authors: Shutonu Mitra, Tomas Neguyen, Qi Zhang, Hyungmin Kim, Hossein Salemi, Chen-Wei Chang, Fengxiu Zhang, Michin Hong, Chang-Tien Lu, Hemant Purohit, Jin-Hee Cho

Published: 2025-03-24 19:10:34+00:00

AI Summary

This paper introduces the Social Cyber Vulnerability Index (SCVI), a framework integrating individual-level and attack-level characteristics for comprehensive socio-cyber vulnerability assessment. SCVI is validated using survey data (iPoll) and Reddit scam reports, demonstrating its superior ability to capture nuanced socio-technical risks compared to existing metrics.

Abstract

The rise of cyber threats on social media platforms necessitates advanced metrics to assess and mitigate social cyber vulnerabilities. This paper presents the Social Cyber Vulnerability Index (SCVI), a novel framework integrating individual-level factors (e.g., awareness, behavioral traits, psychological attributes) and attack-level characteristics (e.g., frequency, consequence, sophistication) for comprehensive socio-cyber vulnerability assessment. SCVI is validated using survey data (iPoll) and textual data (Reddit scam reports), demonstrating adaptability across modalities while revealing demographic disparities and regional vulnerabilities. Comparative analyses with the Common Vulnerability Scoring System (CVSS) and the Social Vulnerability Index (SVI) show the superior ability of SCVI to capture nuanced socio-technical risks. Monte Carlo-based weight variability analysis confirms SCVI is robust and highlights its utility in identifying high-risk groups. By addressing gaps in traditional metrics, SCVI offers actionable insights for policymakers and practitioners, advancing inclusive strategies to mitigate emerging threats such as AI-powered phishing and deepfake scams.

Key findings

SCVI outperforms existing metrics (CVSS and SVI) in capturing nuanced vulnerabilities. Analysis reveals a mismatch between low self-assessed vulnerability and high attack severity. Regional disparities in vulnerability are identified, highlighting the need for targeted interventions.

Approach

SCVI is calculated by combining an Individual Vulnerability Index (IVI) and an Attack Severity Index (ASI), weighted to balance individual susceptibility and attack impact. IVI uses survey and textual data to assess awareness, behavior, psychological factors, and experience; ASI assesses attack frequency, consequence, and sophistication.

Datasets

iPoll survey data and Reddit scam reports.

Model(s)

UNKNOWN

Author countries

USA

← Previous