{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,15]],"date-time":"2026-06-15T22:38:34Z","timestamp":1781563114115,"version":"3.54.5"},"reference-count":52,"publisher":"Wiley","issue":"7","license":[{"start":{"date-parts":[[2021,7,2]],"date-time":"2021-07-02T00:00:00Z","timestamp":1625184000000},"content-version":"vor","delay-in-days":1,"URL":"http:\/\/onlinelibrary.wiley.com\/termsAndConditions#vor"}],"content-domain":{"domain":["onlinelibrary.wiley.com"],"crossmark-restriction":true},"short-container-title":["Cognitive Science"],"published-print":{"date-parts":[[2021,7]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>This work is an initial step toward developing a cognitive theory of cyber deception. While widely studied, the psychology of deception has largely focused on physical cues of deception. Given that present\u2010day communication among humans is largely electronic, we focus on the cyber domain where physical cues are unavailable and for which there is less psychological research. To improve cyber defense, researchers have used signaling theory to extended algorithms developed for the optimal allocation of limited defense resources by using deceptive signals to trick the human mind. However, the algorithms are designed to protect against adversaries that make perfectly rational decisions. In behavioral experiments using an abstract cybersecurity game (i.e., Insider Attack Game), we examined human decision\u2010making when paired against the defense algorithm. We developed an instance\u2010based learning (IBL) model of an attacker using the Adaptive Control of Thought\u2010Rational (ACT\u2010R) cognitive architecture to investigate how humans make decisions under deception in cyber\u2010attack scenarios. Our results show that the defense algorithm is more effective at reducing the probability of attack and protecting assets when using deceptive signaling, compared to no signaling, but is less effective than predicted against a perfectly rational adversary. Also, the IBL model replicates human attack decisions accurately. The IBL model shows how human decisions arise from experience, and how memory retrieval dynamics can give rise to cognitive biases, such as confirmation bias. The implications of these findings are discussed in the perspective of informing theories of deception and designing more effective signaling schemes that consider human bounded rationality.<\/jats:p>","DOI":"10.1111\/cogs.13013","type":"journal-article","created":{"date-parts":[[2021,7,2]],"date-time":"2021-07-02T13:48:18Z","timestamp":1625233698000},"update-policy":"https:\/\/doi.org\/10.1002\/crossmark_policy","source":"Crossref","is-referenced-by-count":27,"title":["Towards a Cognitive Theory of Cyber Deception"],"prefix":"10.1111","volume":"45","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6081-4570","authenticated-orcid":false,"given":"Edward A.","family":"Cranford","sequence":"first","affiliation":[{"name":"Department of Psychology Carnegie Mellon University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6244-2918","authenticated-orcid":false,"given":"Cleotilde","family":"Gonzalez","sequence":"additional","affiliation":[{"name":"Social and Decision Sciences Department Carnegie Mellon University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2488-8959","authenticated-orcid":false,"given":"Palvi","family":"Aggarwal","sequence":"additional","affiliation":[{"name":"Social and Decision Sciences Department Carnegie Mellon University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3296-3672","authenticated-orcid":false,"given":"Milind","family":"Tambe","sequence":"additional","affiliation":[{"name":"USC Center for AI in Society University of Southern California"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0165-3543","authenticated-orcid":false,"given":"Sarah","family":"Cooney","sequence":"additional","affiliation":[{"name":"USC Center for AI in Society University of Southern California"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4865-3062","authenticated-orcid":false,"given":"Christian","family":"Lebiere","sequence":"additional","affiliation":[{"name":"Department of Psychology Carnegie Mellon University"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"311","published-online":{"date-parts":[[2021,7,2]]},"reference":[{"key":"e_1_2_11_2_1","unstructured":"Abbasi Y. D. Ben\u2010Asher N. Gonzalez C. Kar D. Morrison D. Sintov N. &Tambe M.(2016).Know your adversary: Insights for a better adversarial behavioral model. In A. Papafragou Daniel J. Grodner D. Mirman & J. Trueswell (Eds.) Proceeding of the 38th annual conference of cognitive science society(pp.1391\u20131396).Austin TX:Cognitive Science Society."},{"key":"e_1_2_11_3_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-41932-9_8"},{"key":"e_1_2_11_4_1","doi-asserted-by":"crossref","unstructured":"Aggarwal P. Thakoor O. Mate A. Tambe M. Cranford E. A. Lebiere C. &Gonzalez C.(2020).An exploratory study of a masking strategy of cyberdeception using CyberVAN.Proceedings of the Human Factors and Ergonomics Society Annual Meeting 64(1) 446\u2013450.https:\/\/doi.org\/10.1177\/1071181320641100","DOI":"10.1177\/1071181320641100"},{"key":"e_1_2_11_5_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-32699-3_2"},{"key":"e_1_2_11_6_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-02110-8"},{"key":"e_1_2_11_7_1","doi-asserted-by":"publisher","DOI":"10.1017\/S0140525X00070801"},{"key":"e_1_2_11_8_1","volume-title":"The atomic components of thought","author":"Anderson J. R.","year":"1998"},{"key":"e_1_2_11_9_1","doi-asserted-by":"publisher","DOI":"10.1037\/0033-295X.111.4.1036"},{"key":"e_1_2_11_10_1","doi-asserted-by":"publisher","DOI":"10.1142\/S0219198906000795"},{"key":"e_1_2_11_11_1","doi-asserted-by":"publisher","DOI":"10.1037\/0033-2909.134.4.477"},{"key":"e_1_2_11_12_1","doi-asserted-by":"publisher","DOI":"10.2307\/1885060"},{"key":"e_1_2_11_13_1","doi-asserted-by":"crossref","unstructured":"Cooney S. Wang K. Bondi E. Nguyen T. Vayanos P. Winetrobe H. Cranford E. A. Gonzalez C. Lebiere C. &Tambe M.(2019).Learning to signal in the Goldilocks Zone: Improving adversary compliance in security games. In Brefeld U. Fromont E. Hotho A. Knobbe A. Maathuis M. Robardet C. (Eds.) Machine learning and knowledge discovery in databases(pp.725\u2013740). Cham: Springer.https:\/\/doi.org\/10.1007\/978\u20103\u2010030\u201046150\u20108_42","DOI":"10.1007\/978-3-030-46150-8_42"},{"key":"e_1_2_11_14_1","doi-asserted-by":"publisher","DOI":"10.1111\/tops.12513"},{"key":"e_1_2_11_15_1","doi-asserted-by":"crossref","unstructured":"Cranford E. A. Gonzalez C. Aggarwal P. Cooney S. Tambe M. &Lebiere C.(2020b).Adaptive cyber deception: Cognitively informed signaling for cyber defense. InProceedings of the 53rd Hawaii International Conference on System Sciences Maui HI USA(pp.1885\u20131894).https:\/\/doi.org\/10.24251\/HICSS.2020.232","DOI":"10.24251\/HICSS.2020.232"},{"key":"e_1_2_11_16_1","unstructured":"Cranford E. A. Lebiere C. Gonzalez C. Cooney S. Vayanos P. &Tambe M.(2018).Learning about cyber deception through simulations: Predictions of human decision making with deceptive signals in Stackelberg Security Games.Proceedings of the 40th Annual Conference of the Cognitive Science Society Madison WI USA(pp.258\u2013263)."},{"key":"e_1_2_11_17_1","unstructured":"Cranford E. A. Somers S. Mitsopoulos K. &Lebiere C.(2020).Cognitive salience of features in cyber\u2010attacker decision making. In T. C. Stewart (Ed.) Proceedings of the 18th annual meeting of the international conference on cognitive modeling. University Park PA: Applied Cognitive Science Lab Penn State."},{"key":"e_1_2_11_18_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.tics.2016.04.006"},{"key":"e_1_2_11_19_1","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pbio.3000093"},{"key":"e_1_2_11_20_1","doi-asserted-by":"publisher","DOI":"10.1016\/B978-0-444-62604-2.00005-8"},{"key":"e_1_2_11_21_1","doi-asserted-by":"crossref","unstructured":"Gonzalez C. Aggarwal P. Cranford E. A. &Lebiere C.(2020).Design of dynamic and personalized deception: A research framework and new insights.Proceedings of the 53rd Hawaii International Conference on System Sciences Maui HI USA(pp.1825\u20131834).https:\/\/doi.org\/10.24251\/HICSS.2020.226","DOI":"10.24251\/HICSS.2020.226"},{"key":"e_1_2_11_22_1","doi-asserted-by":"publisher","DOI":"10.1111\/cogs.12170"},{"key":"e_1_2_11_23_1","doi-asserted-by":"publisher","DOI":"10.1037\/a0024558"},{"key":"e_1_2_11_24_1","volume-title":"Transfer of knowledge in economic decision\u2010making","author":"Gonzalez C.","year":"2005"},{"key":"e_1_2_11_25_1","doi-asserted-by":"publisher","DOI":"10.1207\/s15516709cog2704_2"},{"key":"e_1_2_11_26_1","doi-asserted-by":"publisher","DOI":"10.1002\/9781118468333.ch8"},{"key":"e_1_2_11_27_1","doi-asserted-by":"publisher","DOI":"10.1146\/annurev.ps.40.020189.001025"},{"key":"e_1_2_11_28_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cobeha.2016.09.005"},{"key":"e_1_2_11_29_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.obhdp.2012.09.004"},{"key":"e_1_2_11_30_1","unstructured":"Lebiere C.(1999).A blending process for aggregate retrievals.Proceedings of the 6th ACT\u2010R Workshop George Mason University Fairfax VA"},{"key":"e_1_2_11_31_1","unstructured":"Lebiere C. Gonzalez C. &Martin M.(2007).Instance\u2010based decision making model of repeated binary choice.Proceedings of the Eighth International Conference on Cognitive Modeling Ann Harbor MI USA(pp.67\u201372).https:\/\/doi.org\/10.1184\/R1\/6571190.v1"},{"key":"e_1_2_11_32_1","doi-asserted-by":"publisher","DOI":"10.1155\/2013\/921695"},{"key":"e_1_2_11_33_1","unstructured":"Lebiere C. Wallach D. &West R. L.(2000).A memory\u2010based account of the prisoner's dilemma and other 2x2 games.Proceedings of International Conference on Cognitive Modeling Groningen the Netherlands(pp.185\u2013193)."},{"key":"e_1_2_11_34_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10588-018-9279-3"},{"issue":"982","key":"e_1_2_11_35_1","article-title":"Security under uncertainty: Adaptive attackers are more challenging to human defenders than random attackers","volume":"8","author":"Moisan F.","year":"2017","journal-title":"Frontiers in Psychology"},{"key":"e_1_2_11_36_1","doi-asserted-by":"publisher","DOI":"10.1111\/brv.12208"},{"key":"e_1_2_11_37_1","doi-asserted-by":"publisher","DOI":"10.1080\/17470910802299987"},{"key":"e_1_2_11_38_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jebo.2014.03.022"},{"key":"e_1_2_11_39_1","volume-title":"Unified theories of cognition","author":"Newell A.","year":"1990"},{"key":"e_1_2_11_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3337772"},{"key":"e_1_2_11_41_1","unstructured":"Pita J. Jain M. Ord\u00f3nez F. Portway C. Tambe M. Western C. &Kraus S.(2008).ARMOR security for Los Angeles International Airport.Proceeding of the Twenty\u2010Third AAAI Conference on Artificial Intelligence Chicago IL (pp.1884\u20131885)."},{"key":"e_1_2_11_42_1","doi-asserted-by":"publisher","DOI":"10.1037\/0022-3514.45.4.899"},{"key":"e_1_2_11_43_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-41187-3"},{"key":"e_1_2_11_44_1","unstructured":"Sanner S. Anderson J. R. Lebiere C. &Lovett M. C.(2000).Achieving efficient and cognitively plausible learning in Backgammon. In P. Langley (Ed.) Proceedings of the seventeenth international conference on machine learning.San Francisco:Morgan Kaufmann.https:\/\/doi.org\/10.1184\/R1\/6613298.v1"},{"key":"e_1_2_11_45_1","unstructured":"Shieh E. An B. Yang R. Tambe M. Baldwin C. &Meyer G.(2012).PROTECT: A deployed game theoretic system to protect the ports of the United States. InProceedings of the 11th International Conference on Autonomous Agents and Multiagent Systems (AAMAS) Valencia Spain (pp.13\u201320)."},{"key":"e_1_2_11_46_1","doi-asserted-by":"publisher","DOI":"10.1037\/h0042769"},{"key":"e_1_2_11_47_1","doi-asserted-by":"crossref","unstructured":"Sinha A. Fang F. An B. Kiekintveld C. &Tambe M.(2018).Stackelberg Security Games: Looking beyond a decade of success.Proceedings of the 27th international joint conference on artificial intelligence Stockholm Sweden (pp.5494\u20135501).https:\/\/doi.org\/10.24963\/ijcai.2018\/775","DOI":"10.24963\/ijcai.2018\/775"},{"key":"e_1_2_11_48_1","unstructured":"Somers S. Mitsopoulos K. Lebiere C. &Thomson R.(2019).Cognitive\u2010level salience for explainable artificial intelligence.Proceedings of the 17th Annual Meeting of the International Conference on Cognitive Modeling Montreal Quebec Canada."},{"key":"e_1_2_11_49_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-32699-3_1"},{"key":"e_1_2_11_50_1","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9780511973031"},{"key":"e_1_2_11_51_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-64793-3_6"},{"key":"e_1_2_11_52_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-0417(00)00014-0"},{"key":"e_1_2_11_53_1","doi-asserted-by":"crossref","unstructured":"Xu H. Rabinovich Z. Dughmi S. &Tambe M.(2015).Exploring information asymmetry in two\u2010stage security games.Proceedings of the National Conference on Artificial Intelligence Austin TX USA(pp.1057\u20131063).","DOI":"10.1609\/aaai.v29i1.9290"}],"container-title":["Cognitive Science"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/onlinelibrary.wiley.com\/doi\/pdf\/10.1111\/cogs.13013","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/onlinelibrary.wiley.com\/doi\/full-xml\/10.1111\/cogs.13013","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/onlinelibrary.wiley.com\/doi\/pdf\/10.1111\/cogs.13013","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,8,28]],"date-time":"2023-08-28T14:58:17Z","timestamp":1693234697000},"score":1,"resource":{"primary":{"URL":"https:\/\/onlinelibrary.wiley.com\/doi\/10.1111\/cogs.13013"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,7]]},"references-count":52,"journal-issue":{"issue":"7","published-print":{"date-parts":[[2021,7]]}},"alternative-id":["10.1111\/cogs.13013"],"URL":"https:\/\/doi.org\/10.1111\/cogs.13013","archive":["Portico"],"relation":{},"ISSN":["0364-0213","1551-6709"],"issn-type":[{"value":"0364-0213","type":"print"},{"value":"1551-6709","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,7]]},"assertion":[{"value":"2020-06-25","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2021-06-07","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2021-07-02","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}],"article-number":"e13013"}}