Cybersecurity is the practice of protecting systems, networks, and data from digital attacks. Cyberpsychology (CPSY) is defined as the use of psychology to enhance cybersecurity applications. Since the early 2010s, the evolution of Artificial Intelligence (AI) has increasingly integrated with CPSY, leveraging advanced data analysis to decode the distinct personality traits and behavioral patterns of victims, attackers, and defenders.
In this systematic literature review (SLR), we carefully analyze 34 collected research studies of AI usage in cyberpsychology (AI-CPSY) using the preferred reporting items for systematic reviews and meta-analyses (PRISMA) methodology. The review presents a comprehensive taxonomy of the cybersecurity applications, the AI methodologies used, and the psychological concepts employed across the studies. We sort the research studies into four cybersecurity applications: Anomaly Detection (AD), Vulnerability Risk Prediction (VRP), Security Awareness Training (SAT), and Authentication/Identity Verification (AIV). Within each application area, studies are further sorted according to the AI method used including machine learning (ML), deep learning (DL), natural language processing (NLP), and reinforcement learning (RL).
Furthermore, the review identifies the most commonly utilized psychological concepts, quantifies the datasets used in the field, and presents their current implementation and deployment status. At last, it detects research gaps, presents open challenges, and deduces the trending and most effective and emerging methodologies used across the AI-CPSY landscape.
Blogger's Review: This review provides a clear framework for the intersection of cyberpsychology and artificial intelligence, emphasizing the significance of psychology in cybersecurity. This interdisciplinary research offers new perspectives for future cybersecurity strategies, especially in addressing the ever-evolving cyber threats. Utilizing AI to analyze psychological traits can lead to more accurate identification and prevention of potential attackers, enhancing overall cybersecurity defenses.