New Research Introduces Metric for Assessing Cyber Cognitive Attacks and Disinformation Campaigns

A new metric developed by researchers at the University of Colorado, Colorado Springs aims to standardize how analysts measure the effectiveness of disinformation campaigns across social media platforms.

The research, conducted by Bonnie Rushing and Dr. Shouhuai Xu, introduces a straightforward formula—E = I/t—to quantify how effectively disinformation spreads and engages users online. The formula calculates engagement effectiveness by dividing user interactions (views, likes, comments, and shares) by the number of posts or content pieces distributed by the attackers.

This approach represents a significant step forward in disinformation analysis, as it provides security professionals with a standardized method to compare campaigns across different social media ecosystems like Facebook, Instagram, and YouTube—platforms that previously had incompatible metrics.

“Until now, we’ve lacked a consistent way to measure how deeply disinformation campaigns penetrate different online communities,” explained a cybersecurity expert familiar with the research but not involved in the study. “This formula brings a much-needed quantitative dimension to what has often been qualitative analysis.”

The researchers enhanced their framework with a weighted interaction model, recognizing that different forms of engagement represent varying levels of user investment. For instance, sharing content typically demonstrates deeper engagement than simply viewing it, while commenting shows more active participation than merely liking a post.

To make the metric practical for analysts, the study introduces a grading scale ranging from F to A+, with an additional “Viral” classification for exceptionally successful disinformation campaigns. This classification system allows organizations to quickly categorize threats and prioritize responses.

The research team validated their approach through several case studies examining real disinformation campaigns across major social platforms. These practical applications demonstrated how the metric captures not just the breadth of a campaign’s reach but also the depth of user engagement—a crucial factor in understanding how disinformation spreads through online communities.

The paper, titled “Quantifying the Engagement Effectiveness of Cyber Cognitive Attacks: A Behavioral Metric for Disinformation Campaigns,” aligns with the DISARM framework, an established methodology used by security professionals and researchers to analyze and counter disinformation operations.

This research comes at a critical time, as disinformation campaigns have become increasingly sophisticated and widespread. Recent studies from the Stanford Internet Observatory and the Atlantic Council’s Digital Forensic Research Lab have documented a significant rise in coordinated influence operations targeting everything from elections to public health initiatives.

Social media companies have faced mounting pressure to combat disinformation on their platforms, with varying degrees of success. Meta, Twitter (now X), and YouTube have all implemented policies to identify and remove coordinated inauthentic behavior, but measuring the effectiveness of these efforts has remained challenging.

“What makes this research particularly valuable is its practicality,” noted a disinformation researcher at a major tech company. “Having a standardized way to measure engagement effectiveness means we can better allocate resources toward the most dangerous campaigns and more accurately assess whether our countermeasures are working.”

The metric could also have implications for regulatory approaches to social media platforms. As governments worldwide consider legislation to combat online disinformation, having standardized measurements of harm could inform more effective policy decisions.

The researchers suggest their framework offers security professionals a new tool to quantify the behavioral impact of cognitive attacks, potentially improving early detection of viral disinformation before it reaches critical mass.

As information warfare continues to evolve as a significant national security concern, metrics like those proposed by Rushing and Xu may become essential components in the broader toolkit for defending democratic institutions and public discourse from malicious influence operations.