Cyber hygiene: The concept, its measure, and its initial tests

Vishwanath, Arun; Neo, Loo Seng; Goh, Pamela; Lee, Seyoung; Khader, Majeed; Ong, Gabriel; Chin, Jeffery

doi:10.1016/j.dss.2019.113160

Cited by 60 publications

(38 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Self-efficacy in cyber-security can be defined as a belief in one's ability to protect information and information systems from unauthorized disclosure, modification, loss, destruction, and lack of availability for the businesses' benefits [82]. This parameter measures a user's confidence in the ability to mitigate cybersecurity threats [45], [46], [49].…”

Section: ) Self-efficacymentioning

confidence: 99%

“…Old age is a significant predictor of non-compliance with advanced cyber hygiene practices [24], [25], [46]. Most users, young and old age, share detailed personal information such as their address and phone number on social media, most of whom do not see their privacy settings [47]- [49].…”

Section: B: Agementioning

confidence: 99%

“…Theft is defined as stealing sensitive data of organization, credentials, software keys; and stealing tangible items (handheld devices such as smartphones, laptops, and tablets) and electronic devices [29], [30], [46], [60]. It violates system access and confidentiality, resulting in financial instability and reputable leases [64], [65], [67], [72], and [76].…”

Section: B: Theftmentioning

confidence: 99%

See 2 more Smart Citations

Extracting Key Factors of Cyber Hygiene Behaviour Among Software Engineers: A Systematic Literature Review

et al. 2021

View full text Add to dashboard Cite

The advent of new technologies and the rapid growth of internet users have given birth to the menace of cyber-crime. Unfortunately, it is increasing at an alarming pace. This situation calls for good cyber hygiene behavior to secure digital lives. Cyber hygiene behaviour holds a significant role in terms of cybersecurity across the globe. There is a dire need to understand better the user variations associated with good or bad cyber hygiene behaviour and an improved view of what users do to encourage good cyber hygiene. Cybersecurity attacks are rising due to recent advancements in ICT and the Industrial Revolution 4.0 (IR 4.0). Software development organizations are among the crucial sectors suffering from cybersecurity issues. These organizations are more vulnerable to cyber-attacks because they lack proper cybersecurity culture. Although many initiatives have been taken by academia and industry to address this rising issue, the problem still exists for Software development organizations because good cyber hygiene behaviour is not observed, which is a prerequisite to reduce cyber threats. This study performed a Systematic Literature Review (SLR) of research papers published during 2010 -2020. The key factors influencing software engineers' cyber hygiene behaviour intention are extracted from the published literature. The study examined 35 research papers out of 5,270 found from IEEE Xplore, Emerald Insight, SpringerLink, and ScienceDirect databases. The study reviewed number of factors such as the role of personal, social, sociocognitive, environmental, & technological factors that may individually or collectively influence software engineers' cyber hygiene behaviour. The positive and negative factors associated with the cyber hygiene behaviour of software engineers are also categorized. This study enriches the understanding of the potential factors related to software engineers' cyber hygiene behaviours. It provides valuable insights to researchers, software development organizations, governments, and individuals associated with the field of Software Engineering. This research will assist in changing the software engineers' behaviour towards cyber hygiene, which will ultimately lead to mitigate the issues of Cybersecurity.INDEX TERMS Cybersecurity, cybersecurity awareness, cybersecurity behaviour, software development organizations, SME employees, software engineers, factors of cybersecurity behaviour.

show abstract

Section: ) Self-efficacymentioning

confidence: 99%

Section: B: Agementioning

confidence: 99%

Section: B: Theftmentioning

confidence: 99%

See 1 more Smart Citation

Extracting Key Factors of Cyber Hygiene Behaviour Among Software Engineers: A Systematic Literature Review

et al. 2021

View full text Add to dashboard Cite

show abstract

“…Such et al [11] have demonstrated that Cyber Essentials 11 have worked well for SMEs in mitigating threats exploiting vulnerabilities remotely using commodity-level exploitation tools. From a human-cyber interaction perspective, Vishwanath et al [2] have demonstrated that cyber hygiene practices positively impact individuals' cyber attitude which is pivotal to cyber safety. These studies have actively exhibited that even general concepts of basic cyber hygiene work in different organizational contexts and can convincingly reduce cyber risk.…”

Section: Cyber Hygiene In Healthcarementioning

confidence: 99%

Optimizing Investments in Cyber Hygiene for Protecting Healthcare Users

Panda

Panaousis

Loukas

et al. 2020

From Lambda Calculus to Cybersecurity Through Program Analysis

View full text Add to dashboard Cite

Cyber hygiene measures are often recommended for strengthening an organization's security posture, especially for protecting against social engineering attacks that target the human element. However, the related recommendations are typically the same for all organizations and their employees, regardless of the nature and the level of risk for different groups of users. Building upon an existing cybersecurity investment model, this paper presents a tool for optimal selection of cyber hygiene safeguards, which we refer as the Optimal Safeguards Tool (OST). The model combines game theory and combinatorial optimization (0-1 Knapsack) taking into account the probability of each user group to being attacked, the value of assets accessible by each group, and the efficacy of each control for a particular group. The model considers indirect cost as the time employees could require for learning and trainning against an implemented control. Utilizing a game-theoretic framework to support the Knapsack optimization problem permits us to optimally select safeguards' application levels minimizing the aggregated expected damage within a security investment budget. We evaluate OST in a healthcare domain use case. In particular, on the Critical Internet Security (CIS) Control group 17 for implementing security awareness and training programs for employees belonging to the ICT, clinical and administration personnel of a hospital. We compare the strategies implemented by OST against alternative common-sense defending approaches for three different types of attackers: Nash, Weighted and Opportunistic. Our results show that Nash defending strategies are consistently better than the competing strategies for all attacker types with a minor exception where the Nash defending strategy, for a specific game, performs at least as good as other common-sense approaches. Finally, we illustrate the alternative investment strategies on different Nash equilibria (called plans) and discuss the optimal choice using the framework of 0-1 Knapsack optimization.

show abstract

“…In contrast, the businesses implement the best cyber hygiene practices to secure and protect their information and other resources against old and emerging cyberattacks. Consequently the best practices are essential in businesses to protect business devices from any software or hardware damage as well as the data loss [30], and [32]. Good cybersecurity hygiene is a major asset and security measure that provides cyber defense.…”

Section: Introductionmentioning

confidence: 99%

Untitled

2021

JITST

View full text Add to dashboard Cite

Businesses using cyberspace are expanding every day, with Internet users performing different activities affecting cyber hygiene. The user's actions may be good or badultimately determining the state of cyber hygiene. Good cybersecurity hygiene requires a thorough implementation of the best practices to improve safety and protect information or resources, while bad practices lead to data corruption, loss and breaches. Compromised cyber hygiene is the result of exposure to various cyberattacks. Our paper reports the best practices used by different business sectors to maintain cyber hygiene. The study used a qualitative survey mounted on google with 20 business owners and Information Technology managers. We explored the use of best practices to understand business experiences in reducing and avoiding cyber-attacks and improve cyber health. We analyzed the collected data and presented the findings. Cyber essentials have been recommended as the guideline to mitigate cyber risks.

show abstract

Cyber hygiene: The concept, its measure, and its initial tests

Cited by 60 publications

References 14 publications

Extracting Key Factors of Cyber Hygiene Behaviour Among Software Engineers: A Systematic Literature Review

Extracting Key Factors of Cyber Hygiene Behaviour Among Software Engineers: A Systematic Literature Review

Optimizing Investments in Cyber Hygiene for Protecting Healthcare Users

Untitled

Contact Info

Product

Resources

About