Technology has become a staple in conducting any business and function in today’s world. With the rise in technology also comes the rise of malicious actors, those who would use your technology against you to potentially collect vital information, lock you from your information or systems, and much more. As technology increases, so does the need to protect the information on the machine and the machine itself. Cybersecurity Analysts or Information Security Analysts are responsible for protecting networks and systems from cyber-attacks, and Computer/Digital Forensic Analysts gather and analyze evidence related to illegal online activity. Based on the U.S. Bureau of Labor Statistics, with the increase and reliance on technology, “computer and information technology occupations are projected to grow fifteen percent from 2021 to 2023, much faster than the average for all occupations” as well as the expected growth as an Information Security Analysts “35% (Much faster than average),” and for a Computer Forensic Analysts “11% (Much faster than average),” (U.S. Bureau of Labor Statistics). Both roles have similarities and require the technical skills necessary for the position and an understanding of social science principles and research.
Learning and understanding how an individual or group behaves is paramount in creating better defenses. Cybersecurity analysts have the potential to use this information to detect threats and vulnerabilities, shedding light on the motivations behind cyber-attacks. In computer forensics, knowing an individual’s behavior could help discover critical information about a suspect’s digital activity that can contribute to an investigation. One way to contribute is through collecting data from online profiles, “scraper collects data from online accounts using crawling behavior and Twitter API” (Arshad, et al., 2022). Cybersecurity analysts with knowledge of users’ behavior can enable more accurate training and implementation of policies tailored to an organization’s cybersecurity practices.
Risk management is identifying, analyzing, and evaluating threats emerging from organizations to better protect against them. Knowing an individual’s behavior can contribute to risk management and potentially allow the organization to protect itself. With this knowledge, you can better enable the people within your organization and show the importance behind things such as two-factor authenticity. Some people do not understand how detrimental a lack of awareness of threats can be to their information “Some people may not use passwords on their devices because they do not realize the possible threats if someone else accesses their computer.” (Johns, 2021). The analyst uses social science research to help them understand the risks associated with cyber-attacks like ransomware or phishing. As stated in the article “The Role of Psychology in Digital Forensics,” addressing the risks and behaviors of individuals “will guide your priorities for training, courses, and certifications for digital forensics required of your personnel in charge of monitoring these security risks” (Johns, 2021). Implementing risk management policies for an organization, tailoring them to their needs, and considering the unique aspects of individuals as they interact and help protect against threats is an essential part of any organization’s cyber strategy.
The role of Cybersecurity and Computer Forensic Analysts not only protects organizations’ information but can also protect individuals and society as a whole. Cybercriminals often target marginalized groups, so it is good practice for cybersecurity analysts to be aware of the specific risks to these groups. Computer/Digital forensics is still an ever-evolving and relatively new field, which is likely why ethical norms have glanced over and not fully solidified. The article “A Framework for Ethical Digital Forensics Investigations” demonstrates how using a framework provides guidelines, a structure to follow that “serves as a convenient harness for highlighting pertinent ethical considerations as investigators work through the stages during their investigations” (Ferguson et al. 2020). Properly equipped industry regulations, more emphasis on ethical training, and establishing clear laws that directly apply to this subject could help Analysts better understand how ethics are applied to this field. Understanding the motivation and behavior of a cyber offender can lead to better policies and strategies to protect vulnerable or uneducated individuals who do not realize that their information is in peril. As well as individuals protecting themselves with privacy and security tools and equipment that are available to everyone.
Cyber security and computer forensics cannot be understated in how essential it is in a world with an ever-increasing digital footprint. Understanding the behaviors and motives of individuals or groups and establishing and implementing privacy frameworks properly can allow for developing effective risk strategies to protect all groups in society. Staying knowledgeable on new technology, equipment, and tools used in these fields is very important. Analysts can better protect systems and networks by combining social science concepts within these fields along with their technical skills.
References:
Arshad, Humaira, Saima Abdullah, Moatsum Alawida, Abdulatif Alabdulatif, Oludare Isaac Abiodun, and Omer Riaz. 2022. “A Multi-Layer Semantic Approach for Digital Forensics Automation for Online Social Networks” Sensors 22, no. 3: 1115. https://doi.org/10.3390/s22031115
“Computer and Information Technology Occupations: Occupational Outlook Handbook.” U.S. Bureau of Labor Statistics, U.S. Bureau of Labor Statistics, 8 Sept. 2022, https://www.bls.gov/ooh/computer-and-information-technology/home.htm.
Ferguson, R.I., et al. “Precept: A Framework for Ethical Digital Forensics Investigations.” Journal of Intellectual Capital, vol. 21, no. 2, 2020, pp. 257–290., doi:10.1108/jic-05-2019-0097.
Johns, Riley Anne. “The Role of Psychology in Digital Forensics.” Paraben Corporation, 24 Aug. 2021, https://paraben.com/the-role-of-psychology-in-digital-forensics/.