网络作战中的连通性、认知负荷与人机监督
Connectedness, Cognitive Load, and Human-AI Oversight in Cyber Operations
- Virginia Tech（弗吉尼亚理工大学）
机构由 AI 辅助整理，请以论文原文为准。
AI总结：
针对网络作战中人工审查成为监督瓶颈的问题，提出利用环境与连通性遥测作为操作员负荷代理，构建连通性感知监督引擎，以风险与操作员能力共同决定监督需求。
AI中文摘要：
AI辅助的网络态势感知会触发机器生成的推理痕迹（对异常分类的逐步理由说明），人类操作员需要对这些痕迹进行审查。由于网络信号及其痕迹的到达速度快于任何操作员的处理速度，人工审查成为监督的瓶颈约束。标准方法是利用模型侧信号（如置信度或不确定性）来识别风险最高的网络事件以供审查。这种框架忽略了操作员的认知能力，而认知能力随作战环境的变化而剧烈波动。我们提出了一种替代方案，其中系统的环境和连通性遥测数据可作为操作员负荷的可用、非侵入性代理指标。同样的遥测数据还决定了人机协作是否能够联系更广泛的集体以获得支持。在海上平台中，环境与连通性属性（包括深度、活跃通信路径数量、跟踪接触图的密度以及作战节奏）均携带此信号。操作员监督需求成为一个决策，该决策由风险和环境衍生的操作员能力共同决定。我们提出了一种连通性感知监督引擎的参考架构，展示了日常使用场景及其在潜艇网络防御工具包中的预期整合。由此产生两个主题：1）操作员的环境状态本身即是一种连通性测量；2）连通性驱动认知负荷并界定人机网络作战中的集体边界。
英文摘要：
AI-assisted cyber situational awareness triggers machine-generated reasoning traces (step-by-step justifications for anomaly classifications) that a human operator is expected to review. Because cyber signals and their traces arrive faster than any operator can process, human review is the limiting constraint on oversight. The standard approach is to identify the riskiest cyber events for review using model-side signals such as confidence or uncertainty. That framing ignores the operator's cognitive capacity which varies sharply with the operational environment. We propose an alternative where the system's environmental and connectivity telemetry serves as an available, non-invasive proxy for operator load. That same telemetry determines whether the human-AI partnership can reach the broader collective for support. In a maritime platform, environmental and connectivity attributes including depth, number of active communications paths, density of the tracked contact picture, and operational tempo all carry this signal. Need for operator oversight becomes a decision that materializes as a combination of both risk and environment-derived operator capacity. We present a reference architecture for a connectedness-aware oversight engine, demonstrating everyday use cases alongside its intended incorporation into the submarine cyber-defense toolkit. Two themes emerge: 1) the operator's environmental state is itself a connectedness measurement, and 2) connectedness drives the cognitive load and defines a collective boundary in human-AI cyber operations.
