Human Factors in AI-Driven Cybersecurity: Cognitive Biases and Trust Issues
The integration of AI in cybersecurity promises enhanced threat detection and response capabilities, yet its adoption is hindered by human factors, particularly cognitive biases and trust issues. This study investigates how cognitive biases, such as automation bias (47%) and confirmation bias (37%), influence security analysts’ trust in AI-driven tools, drawing on Kahneman’s dual-process theory. Through qualitative interviews with 19 cybersecurity professionals and a comparative analysis of AI solutions from Microsoft, CrowdStrike, Darktrace, and IBM, we identify key barriers to adoption, including explainability gaps and high false positive rates. Findings reveal that 65% of analysts express skepticism toward AI alerts, favoring hybrid human–AI models (79%) over full automation. We propose strategies like Explainable AI (XAI), bias-awareness training, and adaptive trust calibration to mitigate biases and foster trust. These insights highlight the need for user-centric AI designs that balance technical performance with human cognitive realities in cybersecurity operations.
Authors
- Kirsi Helkala (ORCID: https://orcid.org/0000-0003-3698-4585)
- Lasse Øverlier (ORCID: https://orcid.org/0000-0002-7640-8446)
- Raymond André Hagen (ORCID: https://orcid.org/0009-0003-3512-5751)
Institutions
- Norwegian University of Science and Technology (NO)
- Norwegian Environment Agency (NO)
- Direktoratet for medisinske produkter (NO)
- Norwegian Defence University College (NO)
Publication Details
- Journal
- Digital Threats Research and Practice
- Published
- 2025-08-18
- DOI
- https://doi.org/10.1145/3759260
- Citations
- 1
- Primary Topic
- Ethics and Social Impacts of AI
- Type
- article
- Field-Weighted Citation Impact
- 2.37