Cybersecurity is a pressing matter, and a lot of the responsibility for cybersecurity is put on the individual user. The individual user is expected to engage in secure behavior by selecting good passwords, identifying malicious emails, and more. Typical support for users comes from Information Security Awareness Training (ISAT), which makes the effectiveness of ISAT a key cybersecurity issue. This paper presents an evaluation of how two promising methods for ISAT support users in acheiving secure behavior using a simulated experiment with 41 participants. The methods were game-based training, where users learn by playing a game, and Context-Based Micro-Training (CBMT), where users are presented with short information in a situation where the information is of direct relevance. Participants were asked to identify phishing emails while their behavior was monitored using eye-tracking technique. The research shows that both training methods can support users towards secure behavior and that CBMT does so to a higher degree than game-based training. The research further shows that most participants were susceptible to phishing, even after training, which suggests that training alone is insufficient to make users behave securely. Consequently, future research ideas, where training is combined with other support systems, are proposed.

The education of students to become competent user experience designers is a delicate matter as students need to obtain a multitude of knowledge, skills, and judgmental abilities. In this paper, our effort to manage this multiplicity in a bachelor's program in user experience design is shared along with our experiences and teaching practices influenced by theories of situated and embodied cognition together with reflective teaching. The program was followed up through interviews with eight alumni and a company representative that employs user experience designers. The results show that the program overall works well, although some of the identified issues need to be addressed in the future. The interpretation is that our program curricula and teaching practices are fruitful, which hopefully can contribute to thoughts and discussions for other teachers in the field of user experience design and human-computer interaction.

No abstract

No abstract