Rewind

Usable security research to date has focused on making users more secure, by identifying and addressing usability issues that lead users to making mistakes, or by persuading users to pay attention to security and make secure choices.However, security goals were set by...

Security managers define policies and procedures to express how employees should behave to 'do their bit' for information security. They assume these policies are compatible with the business processes and individual employees' tasks as they know them. Security...

Wearable and personal devices are becoming more and more part of people's everyday lives. These devices produce enormous amount of personal data which are handled by third parties as authorized by the user. However, such third parties may be able to infer sensitive...

This blog post explores how organisations can create, maintain and improve their security culture and addresses the questions one may have in regards to security culture. The author highlights three phenomena that actively prevent affected organisations from achieving...

The recent expansion of Internet of Things (IoT) and the growing trends towards a healthier lifestyle, have been followed by a proliferation in the use of fitness-trackers in our daily life. These wearable IoT devices combined with the extensive use by individuals of...

This blog post emphasises the need for organisation-wide security awareness and offers five recommendations that can improve personal security practises and defend organisations against cyber threats.  

When social networking sites give users granular control over their privacy settings, the result is that some content across the site is public and some is not. How might this content—or characteristics of users who post publicly versus to a limited audience—be...

This paper explores how commonly used communication methods and information retrieval, typically carried out over the Internet via a variety of smart devices, can inadvertently transform the Internet into a hazardous platform due to its inherent propensity to make...

Humans tend to trust each other and to easily disclose personal information. This makes them vulnerable to social engineering attacks. The present study investigated the effectiveness of two interventions that aim to protect users against social engineering attacks,...

A report that investigates users' cyberhygiene and provides insights and implications.  

This study proposes a new framework to help organisations nurture a culture of information security. The framework consists of factors known to affect security behaviour, such as: management; risk assessment; policies; education; and conduct, among others.