Automating the Communication of Cybersecurity Knowledge: Multi-case Study - Information Security Education. Information Security in Action Access content directly
Conference Papers Year : 2020

Automating the Communication of Cybersecurity Knowledge: Multi-case Study


Cybersecurity is essential for the protection of companies against cyber threats. Traditionally, cybersecurity experts assess and improve a company’s capabilities. However, many small and medium-sized businesses (SMBs) consider such services not to be affordable. We explore an alternative do-it-yourself (DIY) approach to bringing cybersecurity to SMBs. Our method and tool, CYSEC, implements the Self-Determination Theory (SDT) to guide and motivate SMBs to adopt good cybersecurity practices. CYSEC uses assessment questions and recommendations to communicate cybersecurity knowledge to the end-user SMBs and encourage self-motivated change. In this paper, the operationalisation of SDT in CYSEC is presented and the results of a multi-case study shown that offer insight into how SMBs adopted cybersecurity practices with CYSEC. Effective automated cybersecurity communication depended on the SMB’s hands-on skills, tools adaptedness, and the users’ willingness to documenting confidential information. The SMBs wanted to learn in simple, incremental steps, allowing them to understand what they do. An SMB’s motivation to improve security depended on the fitness of assessment questions and recommendations with the SMB’s business model and IT infrastructure. The results of this study indicate that automated counselling can help many SMBs in security adoption.
Fichier principal
Vignette du fichier
497436_1_En_8_Chapter.pdf (431.45 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03380700 , version 1 (15-10-2021)





Alireza Shojaifar, Samuel A. Fricker, Martin Gwerder. Automating the Communication of Cybersecurity Knowledge: Multi-case Study. 13th IFIP World Conference on Information Security Education (WISE), Sep 2020, Maribor, Slovenia. pp.110-124, ⟨10.1007/978-3-030-59291-2_8⟩. ⟨hal-03380700⟩
27 View
16 Download



Gmail Facebook X LinkedIn More