Hacking into a Hacker’s Character

Wednesday, June 1, 2016 @ 03:06 PM gHale


Malicious hacking online costs the private and corporate sectors up to $575 billion annually, researchers said.

While the big push for security organizations is to find “ethical” hackers to help combat attacks, employers know little about the personality traits that lead people to pursue and excel at hacking.

RELATED STORIES
Random Numbers could Hike Security
Security Software? Think Again
Ensuring ‘Trustworthy’ Systems
Looking to Hike Online Social Networks Security

A new study shows a characteristic called systemizing provides insight into what makes and motivates a hacker.

“We found a positive association between an individual’s drive to build and understand systems — called ‘systemizing’ — and hacking skills and expertise,” said Dr. Elena Rusconi of the Division of Psychology at Abertay University in Dundee, UK, “In particular, we found that this drive is positively and specifically correlated with code-breaking performance.”

In this study, Rusconi’s group found volunteer “ethical” hackers performed far above average on a series of code-breaking challenges designed to assess their systemizing skills. According to a cognitive and behavioral survey, these hackers also self-reported characteristics that indicated a strong tendency toward systemizing.

Systemizing is also frequently associated with autism and so Rusconi additionally profiled participants for other autistic-like behaviors and skills.

Although none were actually autistic, hackers self-reported higher scores for attention to detail, another autism-like trait. Interestingly, stronger systemizing scores, but not attention to detail, correlated with more skillful code-breaking. In contrast, participants with higher attention to detail performed better on a detail-oriented task such as X-ray image screening.

These results give insight into the psychology and skillset that might predispose an individual toward a variety of security professions. Such information could end up used to improve training programs, job candidate profiling, and predictions of job performance.

Furthermore, the finding that some autism-associated skills can benefit security operations may open new employment opportunities to autistic individuals.

“We are finding evidence that the positive traits of autism can predict better performance in security tasks,” Rusconi said. “This suggests a new way to inform personnel selection in security jobs and to improve the match between individual predispositions and job assignment.”

According to a National Autistic Society estimate, only 15 percent of autistic individuals have full-time employment, although many are willing and able to work. Although it remains murky as to how well autistic people would perform in similar studies, Rusconi’s findings call for further exploration of the potential benefits of security occupations for these individuals, as well as the conditions that would best help them succeed.

Click here to download the study.