Socio-Technical Ecosystem Considerations: An Emergent Research Agenda for AI in Cybersecurity

Cybersecurity continues to be a key element of national security. Given that critical infrastructure is powered by digital systems, any disruption to the flow of vital services has the potential effect of causing harm to citizens, organizations, and government entities. The availability of service offerings may be subject to attacks by AI on various aspects of cyber-physical-social systems. And no system is foolproof. Inasmuch as AI can be a threat to cybersecurity, it can also be used to combat attempts at systems penetration through deep learning and other capabilities. However, focusing our attention on AI alone does not allow for a sufficiently accurate understanding of the complex ecosystem that contributes to the conflicting scenarios that are possible in the context of AI in cybersecurity. This Special Issue provides insights into the broader socio-technical ecosystem considerations that are required for the achievement of system robustness, allowing for a more intricate and balanced understanding of the role of AI in cybersecurity, at various levels relevant to individuals, organizations, and communities/ society. Fundamentally, the socio-technical approach calls for an emphasis on people, processes, and technology, and not solely on the shiny gadgetry that we call products. There are four main themes that form the emergent research agenda: 1) the cybersecurity ecosystem that demands an interdisciplinary approach; 2) the state of the art technology development processes and landscape that provide and facilitate cybersecurity mechanisms and competitive advantage through AI; 3) the interconnected and multifaceted nature of the social, technical, and environmental subsystems in the cybersecurity ecosystem; and 4) the emphasis on human requirements and values, inclusive of end-user capacity and awareness, organizational capability and skills development, and societal considerations inclusive of the public interest.