Citizens’ Cybersecurity Behavior: Some Major Challenges

Li, Ying; Xin, Tong; Siponen, Mikko T.

doi:10.1109/msec.2021.3117371

Cited by 8 publications

(17 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This is explained by the fact that predicting human behavior is associated more with existing vulnerabilities and their consequences [4], rather than with preparation for future attacks. As a result, modern approaches identify risks and vulnerabilities under conditions of a high degree of uncertainty, which can lead to errors [5,6].…”

Section: The Development Of Technologies and Computing Resources Not ...mentioning

confidence: 99%

Development of the concept for determining the level of critical business processes security

Yevseiev

Milov

Zviertseva

et al. 2023

EEJET

View full text Add to dashboard Cite

The development of technologies and computing resources not only expanded the spectrum of digital services in all areas of human activity, but also defined the spectrum of targeted cyber attacks. The object of the study is the process of ensuring the safety of critical business processes that ensure the continuity of production and/or functioning of the company/organization/enterprise as a whole. Targeted attacks are aimed at destroying not only the business structure, but also its individual components that determine critical business processes. Continuity of such business processes is a critical component of any company, organization or enterprise of any form of government, which critically affects the earning of profits or the organization of production processes. The proposed concept of determining the security level of critical business processes is based on the need to use multi-loop information protection systems. This allows to ensure the continuity of critical business processes through a timely objective assessment of the level of security and the timely formation of preventive measures. This approach is based on the proposed rules for determining the achievement of a given level of security, which are based on assessments of the integrity, availability and confidentiality of information arrays, as well as computer equipment in relation to various points of the organization's business processes. The use of threat integration on the internal and external contours of the protection system allows to ensure the necessary level of security and continuity of the production/technological process of critical business processes. The proposed practical implementation of the system security level assessment system in the declarative programming language Prolog, which allows to form requirements regarding the achievement of a given system security level depending on the state assessments of individual system components

show abstract

Section: The Development Of Technologies and Computing Resources Not ...mentioning

confidence: 99%

Development of the concept for determining the level of critical business processes security

Yevseiev

Milov

Zviertseva

et al. 2023

EEJET

View full text Add to dashboard Cite

show abstract

“…Employee cyber behavior is indeed important and a central pillar in early theories of information security awareness (Siponen, 2001). Organizational studies of cyber behavior are helpful to understand how and when employees engage in secure practices, but ICS 32,2 relatively little is known about the cyber behavior of general users, which operate in vastly different information technology environments (Li et al, 2022).…”

Section: Information Security and General User Knowledgementioning

confidence: 99%

“…personal/home security behaviors outside of an organizational context)” (Cram et al , 2019, p. 549). As noted in a recent review article, despite the fact that general users are now using an array of devices and accounts online making cybersecurity increasingly important, “the primary focus of behavioral cybersecurity research has been on an organizational context,” (Li et al , 2022, p. 8).…”

Section: Information Security and General User Knowledgementioning

confidence: 99%

See 1 more Smart Citation

Informational inequality: the role of resources and attributes in information security awareness

Lyon

2023

ICS

View full text Add to dashboard Cite

Purpose The rapid expansion of internet usage and device connectivity has underscored the importance of understanding the public’s cyber behavior and knowledge. Despite this, there is little research that examines the public’s objective knowledge of secure information security practices. The purpose of this study is to examine how objective cyber awareness is distributed throughout society. Design/methodology/approach This study draws on a large national survey of adults to examine the relationship between individual factors – such as demographic attributes and socioeconomic resources – and information security awareness. The study estimates several statistical models using weighted logistic regression to model objective information security awareness. Findings The results indicate that socioeconomic resources such as income and education have a significant effect on individuals’ information security awareness with richer and more highly educated individuals exhibiting greater awareness of important security practices and tools. Additionally, age and gender represent consistent and clear informational gaps in society as older individuals and females are significantly less knowledgeable about an array of information security practices than younger individuals and males, respectively. Social implications The findings have important implications for our understanding of information security behavior and user vulnerability in an increasingly digital and connected society. Despite the growing importance of cybersecurity for all individuals in nearly all domains of daily life, there is substantial inequality in awareness about secure cyber practices and the tools and techniques used to protect one’s self from attacks. While digital technology will continue to permeate many aspects of daily life – from financial transactions to health services to social interactions – the findings here indicate that some users may be far more exposed and vulnerable to attack than others. Originality/value This study contributes to our understanding of general user information security awareness using a large survey and statistical models to generalize about the public’s information security awareness across multiple domains and stimulates future research on public knowledge of information security. The findings indicate that some users may be far more exposed and vulnerable to attack than others. Despite the growing importance of cybersecurity for all individuals in nearly all domains of daily life, there is substantial inequality in awareness about secure cyber practices and the tools and techniques used to protect one’s self from attacks.

show abstract

“…There, it is essential to consider the role of governance and policy and to build more solid ties with civic society. As an example of an overarching societal phenomenon, cybersecurity requires a new set of structures and activities, where citizens are taking part as an important group of learners and change-makers [61]. From the viewpoint of developing national innovation capabilities, our main observation concerns organising innovation activities in a systemic way.…”

Section: Observations From Yaksha Workhopsmentioning

confidence: 99%

Strengthening futures-oriented agenda for building innovation ecosystems

2022

View full text Add to dashboard Cite

This article locates itself at the interface of the innovation ecosystem approach and foresight methodologies. The need for writing this paper emerged from the notion that despite existing common praxis, there is a lack of academic studies combining these approaches simultaneously in a more profound sense. The study adapts the perspective of how foresight can assist in the development of innovation ecosystems. As a constructive study, the aim is to foster revealing the potential that foresight can have for the innovation ecosystem development in both theoretical and practical sense. Foresight approach and its methods offer anticipatory mindset and practical tools for developing and steering of ecosystem life cycle, keeping in mind that an ecosystem is not static but evolving system. For the foresight, the relevance of this article emerges from emphasising the viewpoint of stakeholders, which may generate wider and more engaged involvement of different stakeholders in foresight processes. As an outcome, the paper presents a model called the foresight wheel, which consists of three interrelated elements of ‘Thinking beyond immediate cooperating’, ‘Enabling continuous futures dialogue’ and ‘Building ecosystem futures’ capabilities’. The empirical reflection of this paper relies on observations achieved in an H2020-funded research project, in which both innovation ecosystems and foresight frameworks were applied as part of cybersecurity workshops organised in three Asian countries.

show abstract

Citizens’ Cybersecurity Behavior: Some Major Challenges

Cited by 8 publications

References 10 publications

Development of the concept for determining the level of critical business processes security

Development of the concept for determining the level of critical business processes security

Informational inequality: the role of resources and attributes in information security awareness

Strengthening futures-oriented agenda for building innovation ecosystems

Contact Info

Product

Resources

About