Design of Security Training System for Individual Users

Lim, Il-Kwon; Park, Young-Gil; Lee, Jae-Kwang

doi:10.1007/s11277-016-3380-z

Cited by 16 publications

(11 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…and preventing attacks, but their effectiveness still needs to be determined. Some conducted studies [2], [3], [4], [5], [6], [7], [8], [9], [10], [11], [12], [13], [14], [15], [16], [17], [18], [19], suggest that such interventions can significantly reduce the risk of SE attacks being successful. Others report that they have a limited impact on user behavior [20], [21].…”

Section: User Awareness Training and Other Behavioral Interventions H...mentioning

confidence: 99%

“…However, one article stated that awareness training is ineffective [20] or is not cost-effective [21]. Another stated that there are insufficient studies on security training for individual users [9], even though recognizing that user awareness is essential when reducing the risk of SE. Table 8 presents the employee's training impact according to the increase in cybersecurity and Information security within an enterprise or by not being adequate for cybersecurity and Information security improvement.…”

Section: Rq1: How Do Employee Training Programs Impact the Success Ra...mentioning

confidence: 99%

“…Table 8 presents the employee's training impact according to the increase in cybersecurity and Information security within an enterprise or by not being adequate for cybersecurity and Information security improvement. [2], [3], [4], [5], [6], [7], [8], [9], [10], [11], [12], [13], [14], [15], [16], [17], [18], [19] Not adequate for cybersecurity and Information security improvement 2 [20], [21] RQ2: How can companies or corporations create a culture of security to reduce the success rate of all types of Social Engineering attacks?…”

Section: Rq1: How Do Employee Training Programs Impact the Success Ra...mentioning

confidence: 99%

See 2 more Smart Citations

Improving Social Engineering Resilience In Enterprises

Ribeiro,

Mateus-Coelho,

Mamede

2023

ARIS2-Journal

View full text Add to dashboard Cite

Social Engineering (SE) is a significant problem for enterprises. Cybercriminals continue developing new and sophisticated methods to trick individuals into disclosing confidential information or granting unauthorized access to infrastructure systems. These attacks remain a significant threat to enterprise systems despite significant investments in technical architecture and security measures. User awareness training and other behavioral interventions are critical for improving SE resilience. However, their effectiveness still needs to be determined, as personality traits may turn some individuals more susceptible to SE attacks. This paper aims to provide a comprehensive assessment of the state of knowledge in this field, identifying best practices for improving SE resilience in organizations and supporting the development of new research studies to address this issue. Its goal is to help enterprises of any size develop a framework to reduce the risk of successful SE attacks and create a culture of security awareness.

show abstract

Section: User Awareness Training and Other Behavioral Interventions H...mentioning

confidence: 99%

Section: Rq1: How Do Employee Training Programs Impact the Success Ra...mentioning

confidence: 99%

Section: Rq1: How Do Employee Training Programs Impact the Success Ra...mentioning

confidence: 99%

See 1 more Smart Citation

Improving Social Engineering Resilience In Enterprises

Ribeiro,

Mateus-Coelho,

Mamede

2023

ARIS2-Journal

View full text Add to dashboard Cite

show abstract

“…If each training scenario establishes a corresponding virtual machine, which will consume a lot of hard disk storage space of the physical host. [5] When students switch from web security training scenario A to web security training scenario B during hands-on training, they need to shut down the current virtual machine and start a new one, which will take up more CPU, memory, hard disk and other resources. As a result, the system response becomes slower and students have to wait for a long time.…”

Section: Introductionmentioning

confidence: 99%

An efficient solution for switching web security training scenarios on Windows platform

Qin¹

2023

2022 2nd Conference on High Performance Computing and Communication Engineering (HPCCE 2022)

View full text Add to dashboard Cite

Students use a large number of Web security training scenarios when conducting Web security experiments.In this paper, the running environments required for a large number of Web security training scenarios is classified into several categories. Each category uses one virtual machine. In this way, the consumption of computer hardware resources is reduced and students' time is saved when students switch between Web security training scenarios in the same category.

show abstract

“…There are several different ways to train users presented in the literature. These include providing lectures, text-based warnings, video instructions sent out via email at regular intervals, instructive games and training automatically provided to users in risky situations [21][22][23][24][25]. There are, however, several publications suggesting that many training efforts fail to support users towards secure behavior to a high enough degree [26,27].…”

Section: Introductionmentioning

confidence: 99%

Evaluation of Contextual and Game-Based Training for Phishing Detection

et al. 2022

View full text Add to dashboard Cite

Cybersecurity is a pressing matter, and a lot of the responsibility for cybersecurity is put on the individual user. The individual user is expected to engage in secure behavior by selecting good passwords, identifying malicious emails, and more. Typical support for users comes from Information Security Awareness Training (ISAT), which makes the effectiveness of ISAT a key cybersecurity issue. This paper presents an evaluation of how two promising methods for ISAT support users in acheiving secure behavior using a simulated experiment with 41 participants. The methods were game-based training, where users learn by playing a game, and Context-Based Micro-Training (CBMT), where users are presented with short information in a situation where the information is of direct relevance. Participants were asked to identify phishing emails while their behavior was monitored using eye-tracking technique. The research shows that both training methods can support users towards secure behavior and that CBMT does so to a higher degree than game-based training. The research further shows that most participants were susceptible to phishing, even after training, which suggests that training alone is insufficient to make users behave securely. Consequently, future research ideas, where training is combined with other support systems, are proposed.

show abstract

Design of Security Training System for Individual Users

Cited by 16 publications

References 6 publications

Improving Social Engineering Resilience In Enterprises

Improving Social Engineering Resilience In Enterprises

An efficient solution for switching web security training scenarios on Windows platform

Evaluation of Contextual and Game-Based Training for Phishing Detection

Contact Info

Product

Resources

About