Human Aspects of Information Security and Assurance : 14th IFIP WG 11.12 International Symposium, HAISA 2020, Mytilene, Lesbos, Greece, July 8–10, 2020, Proceedings

This book constitutes the proceedings of the 14th IFIP WG 11.12 International Symposium on Human Aspects of Information Security and Assurance, HAISA 2020, held in Mytilene, Lesbos, Greece, in July 2020.• The 27 full papers presented in this volume were carefully reviewed and selected from 43 submissions. They are organized in the following topical sections: privacy and COVID-19; awareness and training; social engineering; security behavior; education; end-user security; usable security; security policy; and attitudes and perceptions. •The symposium was held virtually due to the COVID-19 pandemic. Front Matter ....Pages i-xi Front Matter ....Pages 1-1 Australian Attitudes Towards Privacy of Information: Will COVID-19 Make a Difference? (Leah Shanley, Michael N. Johnstone, Michael Crowley, Patryk Szewczyk)....Pages 3-15 Concern for Information Privacy: A Cross-Nation Study of the United Kingdom and South Africa (Adéle Da Veiga, Jacques Ophoff)....Pages 16-29 A Review of Information Security Aspects of the Emerging Covid-19 Contact Tracing Mobile Phone Applications (Georgios Magklaras, Lucia N. López-Bojórquez)....Pages 30-44 Front Matter ....Pages 45-45 Towards a Cross-Cultural Education Framework for Online Safety Awareness (R. Herkanaidu, S. M. Furnell, M. Papadaki)....Pages 47-57 Towards an Heuristic Approach to Cybersecurity and Online Safety Pedagogy (Simon Marsden)....Pages 58-70 ContextBased MicroTraining: A Framework for Information Security Training (Joakim Kävrestad, Marcus Nohlberg)....Pages 71-81 Front Matter ....Pages 83-83 Employees’ Interest in Professional Advancement on LinkedIn Increases Susceptibility to Cyber-Social Engineering: An Empirical Test (Mohammed Khaled N. Alotaibi)....Pages 85-96 Does Ubuntu Influence Social Engineering Susceptibility? (Ntsewa B. Mokobane, Reinhardt A. Botha)....Pages 97-108 Quantifying Susceptibility to Spear Phishing in a High School Environment Using Signal Detection Theory (P. Unchit, S. Das, A. Kim, L. J. Camp)....Pages 109-120 Front Matter ....Pages 121-121 KidsDoodlePass: An Exploratory Study of an Authentication Mechanism for Young Children (Esra Alkhamis, Helen Petrie, Karen Renaud)....Pages 123-132 Information Security Behavioural Threshold Analysis in Practice: An Implementation Framework (D. P. Snyman, H. A. Kruger)....Pages 133-143 Information Security Behavior: Development of a Measurement Instrument Based on the Self-determination Theory (Yotamu Gangire, Adéle Da Veiga, Marlien Herselman)....Pages 144-157 Front Matter ....Pages 159-159 Addressing SME Characteristics for Designing Information Security Maturity Models (Bilge Yigit Ozkan, Marco Spruit)....Pages 161-174 Cyber Security Education and Training Delivering Industry Relevant Education and Skills via Degree Apprenticeships (Ismini Vasileiou)....Pages 175-185 Internet Self-regulation in Higher Education: A Metacognitive Approach to Internet Addiction (Dean John von Schoultz, Kerry-Lynn Thomson, Johan Van Niekerk)....Pages 186-207 Front Matter ....Pages 209-209 Bayesian Evaluation of User App Choices in the Presence of Risk Communication on Android Devices (B. Momenzadeh, S. Gopavaram, S. Das, L. J. Camp)....Pages 211-223 Exploring Information Security and Domestic Equality (Marcus Nohlberg, Joakim Kävrestad)....Pages 224-232 Responding to KRACK: Wi-Fi Security Awareness in Private Households (Jan Freudenreich, Jake Weidman, Jens Grossklags)....Pages 233-243 Front Matter ....Pages 245-245 Exploring the Meaning of “Usable Security” (Markus Lennartsson, Joakim Kävrestad, Marcus Nohlberg)....Pages 247-258 Dyslexia and Password Usage: Accessibility in Authentication Design (Karen Renaud, Graham Johnson, Jacques Ophoff)....Pages 259-268 Securing User eXperience: A Review for the End-Users’ Software Robustness (Panagiotis Zagouras, Christos Kalloniatis)....Pages 269-285 Front Matter ....Pages 287-287 SMEs’ Confidentiality Concerns for Security Information Sharing (Alireza Shojaifar, Samuel A. Fricker)....Pages 289-299 Validation of an Information Privacy Perception Instrument at a Zimbabwean University (Kudakwashe Maguraushe, Adéle Da Veiga, Nico Martins)....Pages 300-314 Are We Really Informed on the Rights GDPR Guarantees? (Maria Sideri, Stefanos Gritzalis)....Pages 315-326 Front Matter ....Pages 327-327 “Most Companies Share Whatever They Can to Make Money!”: Comparing User’s Perceptions with the Data Practices of IoT Devices (Mahdi Nasrullah Al-Ameen, Apoorva Chauhan, M. A. Manazir Ahsan, Huzeyfe Kocabas)....Pages 329-340 Analysis of the ‘Open Source Internet Research Tool’: A Usage Perspective from UK Law Enforcement (Joseph Williams, Paul Stephens)....Pages 341-352 Critical Analysis of Information Security Culture Definitions (Zainab Ruhwanya, Jacques Ophoff)....Pages 353-365 Back Matter ....Pages 367-367 Privacy and COVID-19 -- Australian Attitudes Towards Privacy of Information: Will COVID-19 Make a Difference? -- Concern for Information Privacy: A Cross-Nation Study of the United Kingdom and South Africa -- A review of information security aspects of the emerging covid19 contact tracing mobile phone applications -- Awareness and Training -- Towards a Cross-Cultural Education Framework for Online Safety Awareness -- A heuristic point of view of cybersecurity and online safety pedagogy -- Context Based Micro Training: A Framework for Information Security Training -- Social Engineering -- Employees Ambition for Professional Advancement on LinkedIn Increases Susceptibility to Cyber-Social Engineering: An Empirical Test -- Does ubuntu influence social engineering susceptibility? -- Quantifying Susceptibility to Spear Phishing in a High School Environment Using Signal Detection Theory -- Security Behaviour -- Kids Doodle Pass: An Exploratory Study of an Authentication Mechanism for Young Children -- Information security behavioural threshold analysis in practice: An implementation framework -- Information security behaviour: Development of a measurement instrument based on the self-determination theory -- Education -- Addressing SME Characteristics for Designing Information Security Maturity Models -- Cyber Security Education and Training: Delivering industry relevant education and skills via Degree Apprenticeships -- Internet Self-Regulation in Higher Education: A Metacognitive approach to Internet Addiction -- End-User Security -- Evaluation of User App Choices in the Presence of Risk Communication on Android Devices -- Exploring Information Security and Domestic Equality -- Responding to KRACK: Wi-Fi Security Awareness in Private Households -- Usable Security -- Exploring the meaning of "usable security" -- Dyslexia and Password Usage: Accessibility in Authentication Design -- Securing User eXperience (SUX): A Review For the End-Users Software Robustness -- Sec urity Policy -- SMEs Confidentiality Concerns for Security Information Sharing -- Validation of an information privacy perception instrument at a Zimbabwean university -- Are We Really Informed on the Rights GDPR Guarantees? -- Attitudes and Perceptions -- "Most Companies Share Whatever They Can to Make Money!": Comparing User's Perceptions with the Data Practices of IoT Devices -- Analysis of the 'Open Source Internet Research Tool: A Usage Perspective from UK Law Enforcement -- Critical analysis of Information Security Culture Definitions