Preventing cybercrime: A framework for understanding the role of human vulnerabilities

Cybercrime is the fastest growing form of crime in the world today. Currently, advancements in artificial intelligence (AI) and machine learning (ML) cannot accurately predict how humans will respond to cyberattacks, particularly those that incorporate social engineering (SEing) into their design. Cybercriminals have learned to utilise SEing as an effective means to dupe users of technology (UoT) to into being victimised by capitalising on known vulnerabilities related to human nature and human curiosity, which the authors collectively refer to as the human dimension. This paper introduces a new theory, Required Elements for a Social Engineered Cyber Attack Theory (RESCAT), which provides a more complete understanding of how social engineers (SEs) design cyberattacks, based upon these elements, to increase the probability of a successful cyberattack. RESCAT applies and expands upon routine activities theory (RAT) in an effort to better understand cyber deviance in cyberspace. The paper argues that an expanded approach drawing on criminological theory can reduce the incidence rates of such crimes and propose that incorporating the concepts of RESCAT as a complement to current technology solutions will decrease the risks of being victimised by a cyberattack.