Evaluating the Risks of Human Factors Associated with Social Media Cybersecurity Threats

Fai Ben Salamah; Marco A. Palomino; Maria Papadaki; Matthew J. Craven; Steven Furnell

doi:10.1007/978-3-031-38530-8_28

Evaluating the Risks of Human Factors Associated with Social Media Cybersecurity Threats

Fai Ben Salamah^*, Marco A. Palomino, Maria Papadaki, Matthew J. Craven, Steven Furnell

^*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceeding › Conference proceedings published in a book › peer-review

7 Downloads (Pure)

Abstract

Human behaviors and attitudes play a significant role in cybersecurity. However, studies to quantify the impact of such behaviors and attitudes are scarce, and they are not always considered when developing mitigation strategies. To compensate for this, we have looked into a large sample of employees with different levels of expertise and backgrounds across a variety of industrial sectors and organizations. We have found that age and job role constitute the main human factors associated with social media cybersecurity risks. We can confirm that the youngest employees are the most risk prone within an organization, and the employees working in the business and financial sectors are the ones who face the highest amount of cybersecurity risk. In addition, our investigation shows that employees with less than two years of working experience, and those who are at least of age 55, need more cybersecurity training, due to their lack of awareness on the subject. Our work has led us to formulate a risk equation which can assist policymakers and training providers in defining countermeasures against risks and prioritize the training for those who need it the most.

Original language	English
Title of host publication	Human Aspects of Information Security and Assurance - 17th IFIP WG 11.12 International Symposium, HAISA 2023, Proceedings
Editors	Steven Furnell, Nathan Clarke
Publisher	Springer Science and Business Media Deutschland GmbH
Pages	349-363
Number of pages	15
ISBN (Print)	9783031385292
DOIs	https://doi.org/10.1007/978-3-031-38530-8_28
Publication status	Published - 2023
Event	17th IFIP WG 11.12 International Symposium on Human Aspects of Information Security and Assurance, HAISA 2023 - Kent, United Kingdom Duration: 4 Jul 2023 → 6 Jul 2023

Publication series

Name	IFIP Advances in Information and Communication Technology
Volume	674
ISSN (Print)	1868-4238
ISSN (Electronic)	1868-422X

Conference

Conference	17th IFIP WG 11.12 International Symposium on Human Aspects of Information Security and Assurance, HAISA 2023
Country/Territory	United Kingdom
City	Kent
Period	4/07/23 → 6/07/23

ASJC Scopus subject areas

Information Systems and Management

Keywords

Cybersecurity
human factors
risk management
social media

Access to Document

10.1007/978-3-031-38530-8_28

salamah_palomino_haisa

Cite this

Salamah, F. B., Palomino, M. A., Papadaki, M., Craven, M. J., & Furnell, S. (2023). Evaluating the Risks of Human Factors Associated with Social Media Cybersecurity Threats. In S. Furnell, & N. Clarke (Eds.), Human Aspects of Information Security and Assurance - 17th IFIP WG 11.12 International Symposium, HAISA 2023, Proceedings (pp. 349-363). (IFIP Advances in Information and Communication Technology; Vol. 674). Springer Science and Business Media Deutschland GmbH. https://doi.org/10.1007/978-3-031-38530-8_28

Salamah, Fai Ben ; Palomino, Marco A. ; Papadaki, Maria et al. / Evaluating the Risks of Human Factors Associated with Social Media Cybersecurity Threats. Human Aspects of Information Security and Assurance - 17th IFIP WG 11.12 International Symposium, HAISA 2023, Proceedings. editor / Steven Furnell ; Nathan Clarke. Springer Science and Business Media Deutschland GmbH, 2023. pp. 349-363 (IFIP Advances in Information and Communication Technology).

@inproceedings{e1e1dec8d3fa4d349f3a406bf5d6d09c,

title = "Evaluating the Risks of Human Factors Associated with Social Media Cybersecurity Threats",

abstract = "Human behaviors and attitudes play a significant role in cybersecurity. However, studies to quantify the impact of such behaviors and attitudes are scarce, and they are not always considered when developing mitigation strategies. To compensate for this, we have looked into a large sample of employees with different levels of expertise and backgrounds across a variety of industrial sectors and organizations. We have found that age and job role constitute the main human factors associated with social media cybersecurity risks. We can confirm that the youngest employees are the most risk prone within an organization, and the employees working in the business and financial sectors are the ones who face the highest amount of cybersecurity risk. In addition, our investigation shows that employees with less than two years of working experience, and those who are at least of age 55, need more cybersecurity training, due to their lack of awareness on the subject. Our work has led us to formulate a risk equation which can assist policymakers and training providers in defining countermeasures against risks and prioritize the training for those who need it the most.",

keywords = "Cybersecurity, human factors, risk management, social media",

author = "Salamah, {Fai Ben} and Palomino, {Marco A.} and Maria Papadaki and Craven, {Matthew J.} and Steven Furnell",

note = "Publisher Copyright: {\textcopyright} 2023, IFIP International Federation for Information Processing.; 17th IFIP WG 11.12 International Symposium on Human Aspects of Information Security and Assurance, HAISA 2023 ; Conference date: 04-07-2023 Through 06-07-2023",

year = "2023",

doi = "10.1007/978-3-031-38530-8_28",

language = "English",

isbn = "9783031385292",

series = "IFIP Advances in Information and Communication Technology",

publisher = "Springer Science and Business Media Deutschland GmbH",

pages = "349--363",

editor = "Steven Furnell and Nathan Clarke",

booktitle = "Human Aspects of Information Security and Assurance - 17th IFIP WG 11.12 International Symposium, HAISA 2023, Proceedings",

address = "Germany",

}

Salamah, FB, Palomino, MA, Papadaki, M, Craven, MJ & Furnell, S 2023, Evaluating the Risks of Human Factors Associated with Social Media Cybersecurity Threats. in S Furnell & N Clarke (eds), Human Aspects of Information Security and Assurance - 17th IFIP WG 11.12 International Symposium, HAISA 2023, Proceedings. IFIP Advances in Information and Communication Technology, vol. 674, Springer Science and Business Media Deutschland GmbH, pp. 349-363, 17th IFIP WG 11.12 International Symposium on Human Aspects of Information Security and Assurance, HAISA 2023, Kent, United Kingdom, 4/07/23. https://doi.org/10.1007/978-3-031-38530-8_28

Evaluating the Risks of Human Factors Associated with Social Media Cybersecurity Threats. / Salamah, Fai Ben; Palomino, Marco A.; Papadaki, Maria et al.
Human Aspects of Information Security and Assurance - 17th IFIP WG 11.12 International Symposium, HAISA 2023, Proceedings. ed. / Steven Furnell; Nathan Clarke. Springer Science and Business Media Deutschland GmbH, 2023. p. 349-363 (IFIP Advances in Information and Communication Technology; Vol. 674).

Research output: Chapter in Book/Report/Conference proceeding › Conference proceedings published in a book › peer-review

TY - GEN

T1 - Evaluating the Risks of Human Factors Associated with Social Media Cybersecurity Threats

AU - Salamah, Fai Ben

AU - Palomino, Marco A.

AU - Papadaki, Maria

AU - Craven, Matthew J.

AU - Furnell, Steven

PY - 2023

Y1 - 2023

N2 - Human behaviors and attitudes play a significant role in cybersecurity. However, studies to quantify the impact of such behaviors and attitudes are scarce, and they are not always considered when developing mitigation strategies. To compensate for this, we have looked into a large sample of employees with different levels of expertise and backgrounds across a variety of industrial sectors and organizations. We have found that age and job role constitute the main human factors associated with social media cybersecurity risks. We can confirm that the youngest employees are the most risk prone within an organization, and the employees working in the business and financial sectors are the ones who face the highest amount of cybersecurity risk. In addition, our investigation shows that employees with less than two years of working experience, and those who are at least of age 55, need more cybersecurity training, due to their lack of awareness on the subject. Our work has led us to formulate a risk equation which can assist policymakers and training providers in defining countermeasures against risks and prioritize the training for those who need it the most.

AB - Human behaviors and attitudes play a significant role in cybersecurity. However, studies to quantify the impact of such behaviors and attitudes are scarce, and they are not always considered when developing mitigation strategies. To compensate for this, we have looked into a large sample of employees with different levels of expertise and backgrounds across a variety of industrial sectors and organizations. We have found that age and job role constitute the main human factors associated with social media cybersecurity risks. We can confirm that the youngest employees are the most risk prone within an organization, and the employees working in the business and financial sectors are the ones who face the highest amount of cybersecurity risk. In addition, our investigation shows that employees with less than two years of working experience, and those who are at least of age 55, need more cybersecurity training, due to their lack of awareness on the subject. Our work has led us to formulate a risk equation which can assist policymakers and training providers in defining countermeasures against risks and prioritize the training for those who need it the most.

KW - Cybersecurity

KW - human factors

KW - risk management

KW - social media

UR - http://www.scopus.com/inward/record.url?scp=85172656727&partnerID=8YFLogxK

UR - https://pearl.plymouth.ac.uk/context/secam-research/article/2524/viewcontent/salamah_palomino_haisa.pdf

U2 - 10.1007/978-3-031-38530-8_28

DO - 10.1007/978-3-031-38530-8_28

M3 - Conference proceedings published in a book

AN - SCOPUS:85172656727

SN - 9783031385292

T3 - IFIP Advances in Information and Communication Technology

SP - 349

EP - 363

BT - Human Aspects of Information Security and Assurance - 17th IFIP WG 11.12 International Symposium, HAISA 2023, Proceedings

A2 - Furnell, Steven

A2 - Clarke, Nathan

PB - Springer Science and Business Media Deutschland GmbH

T2 - 17th IFIP WG 11.12 International Symposium on Human Aspects of Information Security and Assurance, HAISA 2023

Y2 - 4 July 2023 through 6 July 2023

ER -

Salamah FB, Palomino MA, Papadaki M, Craven MJ , Furnell S. Evaluating the Risks of Human Factors Associated with Social Media Cybersecurity Threats. In Furnell S, Clarke N, editors, Human Aspects of Information Security and Assurance - 17th IFIP WG 11.12 International Symposium, HAISA 2023, Proceedings. Springer Science and Business Media Deutschland GmbH. 2023. p. 349-363. (IFIP Advances in Information and Communication Technology). doi: 10.1007/978-3-031-38530-8_28

Evaluating the Risks of Human Factors Associated with Social Media Cybersecurity Threats

Abstract

Publication series

Conference

ASJC Scopus subject areas

Keywords

Access to Document

Other files and links

Fingerprint

Adaptive Cybersecurity Training Framework for Social Media Risks

Cite this

Evaluating the Risks of Human Factors Associated with Social Media Cybersecurity Threats

Abstract

Publication series

Conference

ASJC Scopus subject areas

Keywords

Access to Document

Other files and links

Fingerprint

Student theses

Adaptive Cybersecurity Training Framework for Social Media Risks

Cite this