Security Education Research Articles

Exploration of Factors Affecting Pro-social Intention to Disclose Information in Healthcare Settings

This study investigated the relationships of situational factors, motivational assessment–related factors, and situationally induced personal characteristics with pro-social intention to disclose patient information among health and medical students. In total, 210 students from Konyang University participated in the survey, including 116 medical students and 94 other health students. To measure the influence of variables on pro-social intention to disclose information related to health information security, a 27-item questionnaire was used. The reliability of the survey was shown by Cronbach’s α values of 0.859 to 0.917. According to students’ perceptions, higher disease severity was significantly related to higher impacts on the patient, family, and themselves (p<0.01), as well as higher situational empathy (p<0.05). Pro-social intention to disclose showed negative correlations with health information security awareness, information education experience, perceived impact on the self, responsibility to disclose, and personal norms (r=-0.136 to -0.647, p<0.05). Responsibility to disclose and situational empathy explained approximately 44% of the variance in pro-social intention to disclose. Additionally, students who received information security training perceived a significantly higher responsibility to disclose, exhibited higher health information security awareness, and had lower pro-social intention to disclose. This study confirmed the need for information security education for health and medical students, and suggested that pro-social characteristics such as empathy and responsibility need to be carefully addressed in information security education.

Lessons for biosecurity education from the International Nuclear Security Education Network

With the rapid advances in technology and life science, biological security is now at a defining moment. The mandate of the 2022 Biological and Toxin Weapons Convention 9th Review Conference emphasised the urgent need for new tools to strengthen the Convention. In this paper, we review the development and efforts of the International Nuclear Security Education Network (INSEN) to provide examples of best practice for implementation of the newly founded International Biological Security Education Network (IBSEN). Learning from the lessons of the INSEN, the sustainability of the network through continuous engagement of its members is essential for the further development of global biosecurity education.

Assessing student readiness for mobile learning from a cybersecurity perspective

This research aims to measure student readiness in implementing mobile learning from a cybersecurity perspective. Using a quantitative method with a survey approach, the participants in this research were 150 students of the electrical engineering study program at Padang State University in Indonesia, who were randomly stratified to ensure a balanced representation of the academic year. The research is an online objective test related to cybersecurity topics. The data analysis technique used is quantitative descriptive. The analysis results show that system updates are the only indicator with a “good” awareness level, while other indicators are at the “sufficient” and “poor” levels, indicating the need for further improvement. These findings underscore the importance of integrating cyber security education in mobile learning curricula to increase student readiness to face evolving cyber threats. Thus, this research recommends developing specific training programs and adding comprehensive cybersecurity material to the curriculum to equip students with the skills necessary to maintain cybersecurity effectively.

An Examination of Threats and Countermeasures Relating to Healthcare Cyber Risks: The Case of Kenyatta National Hospital

Background Africa has seen an exponential increase in internet penetration and ICT affordances since the turn of the twenty-first century. Healthcare institutions are scrambling to put in place the appropriate safeguards to protect their patients' data from unauthorized access since the need to protect private information has become critical, particularly for cybercriminals eyeing the data of medical patients. This thesis investigates cyber security threats and countermeasures in healthcare, with a focus on Kenyatta National Hospital (KNH). Given Africa's increased internet use and the critical need to protect patient data from cybercriminals, the study explores how data protection and cyber security influence healthcare delivery at the hospital.  Key Objectives To examine cyber threats and countermeasures employed by KNH as well as analyzing the impact of Kenya's Cybercrime Act.  Results The survey at Kenyatta National Hospital shows strong cybersecurity measures, with 89% having dedicated resources and 88% using computers regularly. Regarding the Kenya Cybercrime Act, 74% know how to detect and report hacks, though 8% have encountered malware and 12% lack basic malware knowledge. 78% have anti-virus software, and 63% verify email attachments, while knowledge of social engineering and email scams is limited, revealing a need for further education. The second objective looked at the impact of Kenya Cybercrime Act, as a local data protection laws on supporting patient- healthcare system at Kenyatta National Hospital. A significant majority, 74%, are aware of when their computer is hacked or infected and know whom to contact in such cases. The results also show that 79% of respondents have never encountered a virus or trojan on their computers. When opening email attachments, 63% of respondents always verify that the attachment is from a known and expected source. Knowledge of social engineering attacks is limited, with only 18% of respondents aware of these threats and 82% unfamiliar with them. Regarding email scams, 51% do not know what an email scam is or how to recognize one, underscoring a need for further training. Finally, while 85% of respondents believe their computers are not valuable to hackers, 15% recognize their potential as targets, reflecting differing perceptions of risk and emphasizing the need for ongoing cyber security education.

Towards a cybersecurity culture-behaviour framework: A rapid evidence review

A strong organisational cybersecurity culture (CSC) is critical to the success of any cybersecurity effort, and understanding and measuring CSC is essential if it is to succeed. To facilitate the framing and measurement of CSC we conducted a rapid evidence assessment (REA) to synthesise relevant studies on CSC. The systematic search identified 1,768 records. 59 studies were eligible for the final synthesis.Thematic analysis of the CSC definitions in the included studies highlighted that CSC should not be viewed solely as a technical problem but as a management issue too; CSC requires top management involvement and role modelling, with full organisational support for the desired employee behaviours. We identify both theoretically and empirically derived models of CSC in the REA, along with a range of methods to develop and test these models. Integrative analysis of these models provides detailed information about CSC dimensions, including employee attitudes towards CS; compliance with policies; the role of security education, training and awareness; monitoring of behaviour and top management commitment. The evidence indicates that CSC should be understood both in the context of the wider organisational culture as well as in the shared employee understanding of CS that leads to behaviour.Based on the findings of this review, we propose a novel integrated framework of CSC consisting of cultural values, the culture-to-behaviour link, and behaviour itself. We also make measurement recommendations based on this CSC framework, ranging from simple, broad-brush tools through to suggestions for multi-dimensional measures, which can be applied in a variety of sectors and organisations.

On the Cultivation of National Security Education Teachers Qualities in Primary, Secondary, and Tertiary Schools in the New Era

The report of the 20th National Congress of the Communist Party of China once again emphasized the importance of national security education, clearly requiring the whole society to strengthen national security awareness and build a solid national security defense line. Under this guiding ideology, it is particularly urgent to comprehensively enhance the competence of national security education teachers in primary, secondary, and tertiary schools. By building a systematic training system, enhancing teachers professional knowledge and comprehensive literacy, and establishing a multi-level and multi-dimensional assessment mechanism, teachers teaching level and practical ability can be effectively improved. This article explores effective strategies for cultivating the competence of national security education teachers in the new era from these perspectives, in order to promote the sustainable development and innovation of national security education and ensure the in-depth promotion of national security education.

Vietnam Students' National Defence and Security Education: Challenges and Solutions

Vietnam Students' National Defence and Security Education: Challenges and Solutions

A Review of Attacker–Defender Games and Cyber Security

The focus of this review is the long and broad history of attacker–defender games as a foundation for the narrower and shorter history of cyber security. The purpose is to illustrate the role of game theory in cyber security and which areas have received attention and to indicate future research directions. The methodology uses the search terms game theory, attack, defense, and cyber security in Web of Science, augmented with the authors’ knowledge of the field. Games may involve multiple attackers and defenders over multiple periods. Defense involves security screening and inspection, the detection of invaders, jamming, secrecy, and deception. Incomplete information is reviewed due to its inevitable presence in cyber security. The findings pertain to players sharing information weighted against the security investment, influenced by social planning. Attackers stockpile zero-day cyber vulnerabilities. Defenders build deterrent resilient systems. Stochastic cyber security games play a role due to uncertainty and the need to build probabilistic models. Such games can be further developed. Cyber security games based on traffic and transportation are reviewed; they are influenced by the more extensive communication of GPS data. Such games should be extended to comprise air, land, and sea. Finally, cyber security education and board games are reviewed, which play a prominent role.

A Model for Cybersecurity Education through Challenge Events

AbstractThe INCOSE Vision 2035 sets an important Cybersecurity goal: “Cybersecurity will be as foundational a perspective in systems design as system performance and safety are today”. A critical enabler of achieving this vision is educating cyber informed engineers and professionals. Across industries, the demand for talented cybersecurity professionals is high, which means the personnel and students need inspirational education and training to fill these opportunities. This is particularly the case for complex systems in transportation, maritime, agriculture, aerospace, energy, and industries that rely on operational technology implemented with embedded systems. This broad category of sectors need talent and community to address cybersecurity concerns. Often these economic sectors have systems with long lifecycles, regulations, market forces, or other constraints that preclude security solutions envisioned for information technologies. To address the needs for cybersecurity personnel for these industries, a model for developing talent and building community is explained in general terms with specific examples as it relates to automotive, heavy duty, maritime, and agriculture. The model describes the CyberX Challenge, where X is an industry sector, such as the CyberAuto Challenge, CyberTruck Challenge, CyberBoat Challenge, and CyberTractor Challenge. These Challenge Events are described in detail with a focus on the characteristics of what makes those successful or difficult. The successful events have strong industry support, elite instructors, and motivated students. The model for the event is described in detail, with the intention that other industry verticals may inspire additional students and further build communities able to address cyberthreats to our modern way of life. This work directly contributes solutions to addressing the needed foundational concept of Security Education and Competency development as highlighted by the INCOSE FuSE working group.

민간경비교육 입법정책의 연혁에 따른 비판적 고찰 : 일반경비원 신임교육 중심으로

민간경비교육 입법정책의 연혁에 따른 비판적 고찰 : 일반경비원 신임교육 중심으로

Cyberscape: Designing an Escape Room Game with a Computer Network Security Theme to Encourage Understanding of Network Security Concepts Interactively

Network security is a crucial aspect in the IT world, especially the increasing activity of crecker in carrying out attacks without responsibility. cyberscape is an educational game that will be designed to provide a fundamental understanding of the importance of overcoming crecker attacks on the network. The method used in designing this game is the ADDIE (Analysis, Design, Development, Implementation, and Evaluation) approach. In the analysis stage, needs collection and determination of learning objectives are carried out. The design stage includes storyboarding and game design. Characters and other visual elements are designed using pixil art techniques to provide a unique and attractive appearance. The development stage involves creating game content, initial testing, and code implementation using Unity Game Engine integrated with C# programming language. The implementation stage includes the deployment of the game to users. The results showed that "Cyberscape" was effective in improving players' understanding of basic network security concepts. Users reported a significant increase in their knowledge of how to identify and overcome cracker attacks after playing the game. Qualitative and quantitative evaluations showed a high level of satisfaction among users, as well as an increased awareness of the importance of network security. With this approach, it is hoped that "Cyberscape" can be an effective tool in network security education and help reduce vulnerability to cracker attacks.

Research on National Security Education Issues and Optimization Strategies for College Students

Research on National Security Education Issues and Optimization Strategies for College Students

Data Privacy and Security in the Age of IoT A Comprehensive Study on Information System Vulnerabilities

In the era of the Internet of Things (IoT), data privacy and security issues have become a primary concern in information systems. This research aims to investigate the underlying vulnerabilities of information systems concerning data privacy and security in the context of IoT. The research methods employed include literature surveys, case analyses, and reviews of best practices in data protection. The findings highlight several key vulnerability points, including weaknesses in credential management, network attacks, and deficiencies in data encryption implementation. Moreover, the findings indicate that despite advancements in security technology, significant gaps still exist that can be exploited by unethical parties to access users' IoT personal data. In conclusion, data protection in the context of IoT requires a holistic approach involving preventive measures, detection, and rapid response to evolving security threats. This research underscores the importance of data security education and awareness among IoT users and the necessity of collaboration among government, industry, and society to address these challenges.

Building the Urban Organizational Capability for Resilience as a Matter of Updating Security Education of Community

Abstract This article intends to emphasize the role that education has in strengthening resilience in the urban environment. It is highlighted how, starting from quantitative and qualitative aspects of some work tools dedicated to resilience, weak points of the materialization stage of the security culture to support a mature level of resilience can be identified. In practice, we can talk about a mutually supportive relationship between the two concepts: a high level of security culture allows, facilitates and augments an organizational behavior that favors resilience in the face of contemporary adversities, and the lessons learned as a result of an experience aimed at resilience adjust and provide feed-back to the security culture. Both macroconcepts have a common vein of support given by the educational component of the characteristic processes. Wanting to be as resilient as possible, against a backdrop of a robust security culture, therefore becomes a matter of preparation and training first and foremost. The research method is exploratory, accompanied by examples of known cases. The convergence of the approach has the purpose of bringing to the attention of stakeholders the usefulness of table top exercises, as a necessary training method for risk awareness and emergency management.

Societal Resilience as Intangible Critical Infrastructure

The concept of societal resilience – the central concept of the National Defence Strategy – is, to a certain degree, not only semantically, but especially pragmatically ambiguous, as the concept has not been operationalised in the literature, on the one hand, and the state societal resilience, implementable through formal, non-formal and informal education, has not benefitted from adequate levers for application, on the other hand. The recent educational reform, achieved through the two laws, on pre-university education and on higher education, adopted in 2023, does not directly contribute to societal resilience. Under these circumstances, of an inadequately designed security education and of a pragmatic ambiguity of the strategy, which means that the communication intentions (obligation, recommendation, suggestion) are not clarified, it is necessary to exceed the classical normative framework that regulates the national educational system and to design the education-resilience binomial as critical national infrastructure. Resilience, coming from the field of safety culture studies, can be considered intangible critical infrastructure, which needs a tangible system defined or possibly defined in the Romanian legislation regarding critical infrastructure, so that it can trigger the mechanism for implementing the projection of the National Defence Strategy. The present article contributes to the identification of possible projective directions of the education-resilience binomial as critical infrastructure.

Reziliența societală ca infrastructură critică intangibilă

The concept of societal resilience – the central concept of the National Defence Strategy – is, to a certain degree, not only semantically, but especially pragmatically ambiguous, as the concept has not been operationalised in the literature, on the one hand, and the state societal resilience, implementable through formal, non-formal and informal education, has not benefitted from adequate levers for application, on the other hand. The recent educational reform, achieved through the two laws, on pre-university education and on higher education, adopted in 2023, does not directly contribute to societal resilience. Under these circumstances, of an inadequately designed security education and of a pragmatic ambiguity of the strategy, which means that the communication intentions (obligation, recommendation, suggestion) are not clarified, it is necessary to exceed the classical normative framework that regulates the national educational system and to design the education-resilience binomial as critical national infrastructure. Resilience, coming from the field of safety culture studies, can be considered intangible critical infrastructure, which needs a tangible system defined or possibly defined in the Romanian legislation regarding critical infrastructure, so that it can trigger the mechanism for implementing the projection of the National Defence Strategy. The present article contributes to the identification of possible projective directions of the education-resilience binomial as critical infrastructure.

Implementasi Nilai Nilai Kebangsaan Berbasis NKRI Terhadap Pentingnya Manajemen Security di Era Digitalisasi

The era of digitalization has brought significant changes in various aspects of life, including in security management. The wider application of digital technology requires an adaptive and innovative security approach to deal with evolving threats. In the context of the Unitary State of the Republic of Indonesia (NKRI), the implementation of national values in digital security management is very important. These values include unity, integrity, justice, democracy and diversity, which are the foundations of NKRI. This research aims to analyze the importance of security management in the digitalization era based on the NKRI's national values.The method used in this research is descriptive qualitative, with a literature study approach and document analysis related to digital security policies in Indonesia. The analysis focused on how NKRI national values are implemented in security management strategies and practices to face digital security challenges. The results show that the integration of national values in digital security management plays an important role in strengthening national resilience in the digital space. The implementation of national values helps in building a digital security system that is not only technically robust, but also responsive to Indonesia's social and cultural dynamics. This includes the development of inclusive cybersecurity policies, digital security education for diverse communities, and strengthening collaboration between sectors to strengthen the national digital security ecosystem.

A COMPARATIVE ANALYSIS OF CYBER SECURITY BEHAVIOURS OF UNIVERSITY STUDENTS

Concern over cyber security is on the rise because of our growing reliance on technology. Examining students’ awareness of cyber security is crucial because they frequently use technology. The paper compares student awareness of cyber security at Erzurum Technical University and Kyrgyz-Turkish Manas University. The review investigated both the effectiveness of these universities’ cyber security education initiatives as well as the students’ understanding of cyber security issues. Throughout the online education process, the research was carried out in Türkiye and Kyrgyzstan. The findings revealed that students at Erzurum Technical University were more knowledgeable of cyber security issues than those at Kyrgyz-Turkish Manas University. The article made a number of recommendations based on the findings for raising student awareness of cyber security, including education and training, regular assessments, fostering a culture of cyber security, incorporating cyber security into the curriculum, and creating a cyber-security community. According to the article’s conclusion, colleges are crucial in ensuring that students are well-informed and have the skills and information they need to defend themselves online.

From awareness to behaviour: understanding cybersecurity compliance in Vietnam

From awareness to behaviour: understanding cybersecurity compliance in Vietnam

Instinct, Suprresion and Catharsis: The Psychological Source and Guidance of Teenagers' Network Ideology in the Era of Big Data

The unique educational attributes of the big data era can not only improve the audience's acceptance effect, but also accelerate the overall process of achieving ideological security education goals, playing a certain role in maintaining the unity of youth's thinking and daily behavior. Youth are the "core indigenous people" in the field of the Internet. Big data and mobile communication have brought new changes to the lifestyle and values of young people. In an era full of data, linking big data with life, work, and education is a contemporary issue that we should pay attention to and think about. The purpose of this study is to explore the psychological sources and guidance methods of adolescent online ideology in the era of big data. Firstly, through literature analysis and empirical research, we found that psychological factors such as instincts, repression, and venting among adolescents have a significant impact on their online ideology. Secondly, we utilized methods such as questionnaire surveys and in-depth interviews to explore the relationship between different psychological sources and online ideology. Finally, we propose a series of targeted guidance strategies, including enhancing self-awareness, cultivating a healthy mindset, and improving network literacy, to help teenagers establish the correct network ideology. It is necessary to strengthen the self-management awareness of teenagers, cultivate targeted opinion leaders, strengthen online supervision, establish and improve a risk prevention mechanism for online ideology, and promote mainstream ideology.