An Instrument to Measure Human Behavior Toward Cyber Security Policies
Autor: | Shahad Abdulaziz Dahdouh, Hanan Abdullah Alshehri, Basstaa Mohammad Alsubaie, Afnan Mohammed Alghamdi, Abdulrahman Alharby, Norah Ahmed Almubairik, Khalid Alissa |
---|---|
Rok vydání: | 2018 |
Předmět: |
Password
business.industry Computer science Human error Behavioral pattern Information technology 020206 networking & telecommunications 02 engineering and technology Information security Computer security computer.software_genre Human behavior Work related Electronic mail 0202 electrical engineering electronic engineering information engineering 020201 artificial intelligence & image processing business computer |
Zdroj: | 2018 21st Saudi Computer Society National Computer Conference (NCC). |
DOI: | 10.1109/ncg.2018.8592978 |
Popis: | Human is the weakest link in information security. Even with strong cyber security policies an organization can still be hacked because of a human error. Even if people are aware of the policies and their importance they might not behave accordingly. This shows to the importance of studying and measuring human behavior toward cyber security policies. This paper introduces a new instrument that can be used to measure human behavior toward cybersecurity policies through creative measures. The goal is to gather data about human behaviors toward cybersecurity policies in natural environment. This method of gathering information allows people to behave normally and don’t feel the need to answer perfectly. The paper illustrates all the previous work related to the subject, summarizing previous work in order to improve what have been previously done. The methodology seeks on measuring behavior based on specific measures. These measures are the password, email, identity, sensitive data, and physical/resource security. Each measure has a number of policies used to measure behavior. These policies were selected among several policies based on literature from the same field and the opinion of experts in the field. These question that went through several rounds of check were used to build the proposedinstrument. This instrument then shall be used by researchers to collect data and perform the required analysis. This paper discusses the behavior pattern in a detail and concise manner. The paper demonstrates that it is posable to measure behavior if the right we questions were asked in the right way. |
Databáze: | OpenAIRE |
Externí odkaz: |