How to keep your information secure? Toward a better understanding of users security behavior

Bibliographic Data

ID21401968
AuthorsÁlvaro Arenas (0000-0003-1183-1283, IE University), Gautam Ray (0000-0001-8567-5952, University of Minnesota), Antonio Hidalgo Nuchera (0000-0002-3598-9862, Universidad Politécnica de Madrid), Antonio Hidalgo, Alberto Urueña (0000-0002-1299-2380, Universidad Politécnica de Madrid, corresponding author)
Year2024
Volume198
Pages123028
Publication date2024-01-01
Open AccessYes
TypeARTICLE
VenueTechnological Forecasting and Social Change (JOURNAL)
Journal identifiersISSN: 0040-1625 • E-ISSN: 1873-5509
PublisherElsevier BV (PUBLISHER)
DOI10.1016/j.techfore.2023.123028
OpenAlexW4389037201
LanguageEN
References cited43

Use of computers and the Internet is an integral part of our lives, with business becoming more digital. As a result, individuals are using their home computers to perform diverse tasks and to store sensitive data. This paper investigates the relative efficacy of two strategies to protect home computers from security threats: security tools and security activities. For the analysis, we collected data from over 1900 individuals in Spain, following an approach combining self- reported data, via an online survey, with actual data collected directly from home users' computers. The main contribution of the paper is to provide a model, based on routine activity theory, explaining the role of security tools and security activities in protecting personal computers from malware infection, thus offering an in-depth understanding of users' security behavior. Using multivariate, logit and probit regressions, our study reveals that having security tools is positively related with higher risk activities and more infections, while pursuing security activities reduces malware infections. These results have important implications for policy makers and organizations, reinforcing the view that security tools are not sufficient to protect users from malware infection, and the need to develop security education and awareness programs for computer users

Cloud computing · Cloud computing security · Computer security · Information security · Internet privacy · Logit · Machine learning · Malware · Security awareness · Security information and event management · The Internet · World Wide Web · Computer Science · Cybercrime and Law Enforcement Studies · Information and Cyber Security · Privacy, Security, and Data Protection

Tools

Open DOIOpen Access