Original title: Assessing Socio-Cyber Vulnerability Using Survey and Social Media Data
Shutonu Mitra, Qi Zhang, Tomas Neguyen, Hossein Salemi +5 · August 2026
Online scams like fake romances, phishing, and fake tech support target people rather than software bugs. Current safety tools either focus only on computer code flaws or look broadly at communities without checking cyber risks. To fix this, researchers created the Social Cyber Vulnerability Index. It works by combining two distinct scores: one for the person and one for the attack. The personal score measures someone's online habits, awareness, psychology, and past scam experiences. The attack score measures how often threats hit, how damaging they are, and how tricky they look. The team found this system effectively spots who is most at risk. It separates real scam victims from non-victims much better than older tools, while also revealing regional and demographic differences in risk.
Imagine a coach choosing which players to rest. Looking only at how hard each player has trained misses the fact that some are about to face much stronger opponents. Looking only at the opponents misses which players are already exhausted. In this paper, the new index combines the person's own risk factors with how severe the threats against them are, so it can spot who needs help most.
Existing cyber-risk tools focus on technical flaws or community-level factors, so they miss the human behaviors that make scams work. SCVI identifies high-risk individuals and separates victims from non-victims more clearly, which can help target interventions against AI-enabled scams.
The abstract doesn't say what the limitations are. It reports validation on a U.S. survey and Reddit reports, so generalizability beyond those sources is not established.
Ask anything about this paper. Answers come from its abstract, and say so when the abstract doesn't cover your question.
Assessing Socio-Cyber Vulnerability Using Survey and Social Media Data — Shutonu Mitra, Qi Zhang, Tomas Neguyen et al.
Abstract licence: CC0
Explanation generated by Synthesis from the abstract — it is not the original paper. This is a preprint, so it hasn't necessarily been peer reviewed.