Gamification techniques for raising cyber security awareness

Due to the prevalence of online services in modern society, such as internet banking and social media, it is important for users to have an understanding of basic security measures in order to keep themselves safe online. However, users often do not know how to make their online interactions secure, which demonstrates an educational need in this area. Gamification has grown in popularity in recent years and has been used to teach people about a range of subjects. This paper presents an exploratory study investigating the use of gamification techniques to educate average users about password security, with the aim of raising overall security awareness. To explore the impact of such techniques, a role-playing quiz application (RPG) was developed for the Android platform to educate users about password security. Results gained from the work highlightedthat users enjoyed learning via the use of the password application, and felt they benefitted from the inclusion of gamification techniques. Future work seeks to expand the prototype into a full solution, covering a range of security awareness issues

Usability and Trust in Information Systems

The need for people to protect themselves and their assets is as old as humankind. People's physical safety and their possessions have always been at risk from deliberate attack or accidental damage. The advance of information technology means that many individuals, as well as corporations, have an additional range of physical (equipment) and electronic (data) assets that are at risk. Furthermore, the increased number and types of interactions in cyberspace has enabled new forms of attack on people and their possessions. Consider grooming of minors in chat-rooms, or Nigerian email cons: minors were targeted by paedophiles before the creation of chat-rooms, and Nigerian criminals sent the same letters by physical mail or fax before there was email. But the technology has decreased the cost of many types of attacks, or the degree of risk for the attackers. At the same time, cyberspace is still new to many people, which means they do not understand risks, or recognise the signs of an attack, as readily as they might in the physical world. The IT industry has developed a plethora of security mechanisms, which could be used to mitigate risks or make attacks significantly more difficult. Currently, many people are either not aware of these mechanisms, or are unable or unwilling or to use them. Security experts have taken to portraying people as "the weakest link" in their efforts to deploy effective security [e.g. Schneier, 2000]. However, recent research has revealed at least some of the problem may be that security mechanisms are hard to use, or be ineffective. The review summarises current research on the usability of security mechanisms, and discusses options for increasing their usability and effectiveness

Media(ted) fabrications: How the science-media symbiosis helped ‘sell’ cord banking

This paper considers the problematic role of the science–media symbiosis in the dissemination of misleading and emotionally manipulative information regarding services offered by CordBank, New Zealand's only umbilical cord blood banking facility. As this case study illustrates, the growing reliance of health and science reporters on the knowledge capital of medical specialists, biogenetic researchers, and scientists potentially enhances the ability of ‘expert’ sources to set the agenda for media representations of emerging medical and scientific developments, and may undermine the editorial independence of journalists and editors, many of whom in this case failed to critically evaluate deeply problematic claims regarding the current and future benefits of cord banking. Heavy reliance on established media frames of anecdotal personalization and technoboosterism also reinforced a proscience journalistic culture in which claims by key sources were uncritically reiterated and amplified, with journalistic assessments of the value of cord banking emphasizing potential benefits for individual consumers. It is argued that use of these media frames potentially detracts from due consideration of the broader social, ethical, legal, and health implications of emerging biomedical developments, along with the professional, personal, and increasingly also financial interests at stake in their public promotion, given the growing commercialization of biogenetic technologies