Research

Paper

AI LLM March 09, 2026

Towards Modeling Cybersecurity Behavior of Humans in Organizations

Authors

Klaas Ole Kürtz

Abstract

We undertake a comprehensive and structured synthesis of the drivers of human behavior in cybersecurity, focusing specifically on people within organizations (i.e., especially employees in companies), and integrate key concepts such as awareness, security culture, and usability into a coherent theoretical framework. This model is then compared with several relevant behavioral models that fundamentally represent drivers of human behavior. Additionally, we discuss how this theoretical framework can help the domain of agentic AI security: We argue that as AI systems increasingly act as autonomous agents within organizations and based on natural language processing, they also exhibit vulnerabilities analogous to human behavioral risks. Consequently, we propose that this human-centric model offers a blueprint for developing additional security strategies against manipulation attacks targeting AI agents.

Metadata

arXiv ID: 2603.08484
Provider: ARXIV
Primary Category: cs.CR
Published: 2026-03-09
Fetched: 2026-03-10 05:43

Related papers

Raw Data (Debug)
{
  "raw_xml": "<entry>\n    <id>http://arxiv.org/abs/2603.08484v1</id>\n    <title>Towards Modeling Cybersecurity Behavior of Humans in Organizations</title>\n    <updated>2026-03-09T15:19:53Z</updated>\n    <link href='https://arxiv.org/abs/2603.08484v1' rel='alternate' type='text/html'/>\n    <link href='https://arxiv.org/pdf/2603.08484v1' rel='related' title='pdf' type='application/pdf'/>\n    <summary>We undertake a comprehensive and structured synthesis of the drivers of human behavior in cybersecurity, focusing specifically on people within organizations (i.e., especially employees in companies), and integrate key concepts such as awareness, security culture, and usability into a coherent theoretical framework. This model is then compared with several relevant behavioral models that fundamentally represent drivers of human behavior. Additionally, we discuss how this theoretical framework can help the domain of agentic AI security: We argue that as AI systems increasingly act as autonomous agents within organizations and based on natural language processing, they also exhibit vulnerabilities analogous to human behavioral risks. Consequently, we propose that this human-centric model offers a blueprint for developing additional security strategies against manipulation attacks targeting AI agents.</summary>\n    <category scheme='http://arxiv.org/schemas/atom' term='cs.CR'/>\n    <published>2026-03-09T15:19:53Z</published>\n    <arxiv:comment>11 pages, 1 figure</arxiv:comment>\n    <arxiv:primary_category term='cs.CR'/>\n    <author>\n      <name>Klaas Ole Kürtz</name>\n    </author>\n  </entry>"
}