Department of Computer, Control and Management Engineering

This study proposes an innovative multi-layer attack model for cybersecurity that integrates human, access, and network layers. In particular, it focuses on the human layer which has been recently recognized as a still open issue. Drawing on literature, human factors (HFs) that contribute to cyber vulnerabilities and human behaviors that can lead to vulnerabilities are identified. Finally, the research discusses human capabilities that could be leveraged as mitigation factors. By considering the HFs from a twofold perspective, the study provides a holistic approach that accounts for both technical and human elements in cybersecurity management.