Rewind

This study into the relationship between making choices and self-control demonstrated that making choices (such as between consumer goods) depletes subsequent self control.  

This book offers an introduction to security engineering in the 21st century, offering insights into the workings of 21st century security devices and considerations for those building new security devices.  

Objective: Without standardized definitions of the techniques included in behavior change interventions, it is difficult to faithfully replicate effective interventions and challenging to identify techniques contributing to effectiveness across interventions. This...

Theory provides a helpful basis for designing interventions to change behaviour but offers little guidance on how to do this. This paper aims to illustrate methods for developing an extensive list of behaviour change techniques (with definitions) and for linking...

Recent reports indicate a shortage of approximately 20,000- 30,000 qualified cyber-security specialists in the US Public Sector alone despite being one of the best financially compensated technology-related domains. Against ever evolving cyber-threats the need to...

SoHo users are increasingly faced with the dilemma of applying appropriate security mechanisms to their computer with little or no knowledge of which countermeasure will deal with which potential threat. As problematic as it may seem for individuals to apply...

This paper presents an experimental study involving participants using an online analytical processing software product. Following usage, the experimental group was informed that the software contained spyware. Responses from the experimental and control groups were...

The spread of broadband Internet has resulted in the increase of spyware and adware. This study highlights their damaging effects and proposes a model that captures defensive measures adopted by Internet users. Specifically, our model indicates that knowledge has a...

The collection and dissemination of information about people by businesses and governments is ubiquitous. One of the main threats to people's privacy comes from human carelessness with this information, yet little empirical research has studied behaviors associated...

Two well-grounded motivational models—command-and-control and self-regulation, which are viewed as competing explanations of why individuals follow rules (Tyler and Blader 2005)—are used as conceptual lenses through which to view employees’ adherence to information...

When considering the responsibility for the protection of the individual from online threats, opinion is often divided about whether it resides with technology manufacturers or end users. In this research we present the thesis that while manufacturers are becoming...

Tools that aim to combat phishing attacks must take into account how and why people fall for them in order to be effective. This study reports a pilot survey of 232 computer users to reveal predictors of falling for phishing emails, as well as trusting legitimate...

Participants in online social networking sites (OSNs) such as MySpace and Facebook (among hundreds of others) revel in the freedom and communion facilitated by the burgeoning social Internet. They often express offense or a feeling of intrusion when their online...

This paper discusses the role of humans as "smart components" in a system, emphasizing that their autonomy must be respected and incentives should be provided to induce desired behavior. The authors argue that a misalignment of incentives can often lead to system...

This article presents the development and assessment of Anti-Phishing Phil, a web-based game aimed at instilling safe online practices to protect users from phishing threats. The game was crafted following educational science guidelines and underwent several rounds of...

We discuss the importance of understanding psychological aspects of phishing, and review some recent findings. Given these findings, we critique some commonly used security practices and suggest and review alternatives, including educational approaches. We suggest a...

This study aimed to reveal a baseline level of phishing success, finding a success rate of 16% when phishing emails were sent from unknown senders, rising to a full 72% when phishing emails appeared to be from known senders.