Measuring cybersecurity culture through controlled malware attack simulations

Abstract

The Ecuadorian Air Force (FAE) faces growing cyber threats that jeopardize national security, the integrity of its operations, and the confidentiality of its information. With the advancement of information and communication technologies (TIC), cyberspace has become a new battlefield where cyber threats can affect the institution's functioning. In this context, the FAE created a Cyber Defense unit with the objective of protecting its digital infrastructure by managing security incidents both proactively and reactively. This study aims to measure the level of cybersecurity culture within the FAE, using an experimental methodology to assess the personnel's response to controlled cyberattacks through malware embedded in an application that digitally signs documents. The research is based on a quantitative approach, using surveys and statistical data analysis obtained from the experimental tests. The results will help identify patterns of knowledge and behavior in the personnel regarding cyber threats, providing valuable information to strengthen cybersecurity in the Ecuadorian Air Force and guide future interventions in this field.