Classical cybersecurity is often perceived as a rigid science discipline filled with computer scientists and mathematicians. However, due to the rapid pace of technology development and integration, new criminal enterprises, new defense tactics, and the understanding of the human element, cybersecurity is quickly beginning to encompass more than just computers. Cybersecurity experts must broaden their perspectives beyond traditional disciplinary boundaries to provide the best protection possible. They must start to practice transdisciplinary cybersecurity. Taking influence from the Stakeholder Theory in business ethics, this paper presents a framework to encourage transdisciplinary thinking and assist experts in tackling the new challenges of the modern day. The framework uses the simple Think, Plan, Do approach to enable experts to develop their transdisciplinary thinking. The framework is intended to be used as an evaluation tool for existing cybersecurity practices or postures, as a development tool to engage with other disciplines to foster learning and create new methods, and as a guidance tool to encourage new ways of thinking about, perceiving, and executing cybersecurity practices. For each of those intended uses, a use case is presented as an example to showcase how the framework might be used. The ultimate goal of this paper is not the framework but transdisciplinary thinking. By using the tool presented here and developing their own transdisciplinary thinking, cybersecurity experts can be better prepared to face cybersecurity's unique and complex challenges.
翻译:经典网络安全常被视为由计算机科学家和数学家主导的严谨学科。然而,随着技术开发与融合的快速推进、新型犯罪形式的出现、防御策略的演变以及对人因因素的深入理解,网络安全正迅速超越单纯计算机范畴。网络安全专家必须突破传统学科界限,拓展自身视野,以提供最优防护。他们亟需践行跨学科网络安全理念。本文借鉴商业伦理学中的利益相关者理论,提出一个旨在促进跨学科思维、协助专家应对当代新挑战的框架。该框架采用简洁的"思考-规划-执行"方法,助力专家发展跨学科思维。本框架可作为评估现有网络安全实践或态势的评估工具,用于与其他学科互动以促进学习并创造新方法的发展工具,以及鼓励以新方式思考、认知和执行网络安全实践的指导工具。针对每项预期用途,本文均通过用例演示其应用方式。本文终极目标并非框架本身,而是跨学科思维本身。通过运用本文工具并培养自身跨学科思维,网络安全专家将能更从容地应对网络安全领域的独特复杂挑战。