SaTC: EDU: Collaborative: Personalized Cybersecurity Education and Training

普通公民往往不知道保护自己免受网络安全威胁的共同战略。因此，大量计算机用户容易受到选择弱密码、点击网络钓鱼链接、打开来自未知发送者的附件、忽视设备上的安全警告等操作的安全漏洞的影响，并成为社会工程或身份盗窃的受害者。尽管有许多关于网络安全最佳做法的培训和教育的研究，但这些漏洞仍在被利用这一事实表明，目前的培训并不对所有用户有效。这个项目的目标是有效地教育普通用户有关常见的网络安全威胁，使他们不容易受到这些类型的攻击。该项目将创建针对每个用户的新的个性化教育模块，基于不同的用户具有不同的个性，并可能以不同的方式对威胁做出反应。其结果可能是更多具有网络安全意识的公民，这可能会减少“容易”的黑客和网络盗窃的数量。已经证明，需要不同的模式来有效地教育具有不同人格特征和学习行为的个体。没有“一刀切”的模式。研究人员的目标是1)提高网络安全对模式匹配消息的遵从性，2)开发和评估网络安全教育模块的有效性。研究人员已经证明，个性特征上的个体差异可以用来预测网络安全观念和做法。这项研究将通过对社交媒体语言的分析来对个性进行分类。然后将开发和评估个性化的网络安全教育模块。用户的个性将根据基于Myers-Briggs个性类别和五大个性特征的“真彩色”个性类别进行分配。这种个性化的教育模块方法可以应用于其他领域，如管理、教学和安全培训。此外，用户将变得更具安全意识，这可能会减少网络安全漏洞。这一奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

The average citizen is often unaware of common strategies to protect themselves from cybersecurity threats. Consequently, large numbers of computer users are vulnerable to lapses in security from actions such as choosing weak passwords, clicking on phishing links, opening attachments from unknown senders, ignoring security warnings on devices, and falling victim to social engineering or identity theft. Although there have been many studies on training and educating people on cybersecurity best practices, the fact that these vulnerabilities are still being exploited imply that current training is not effective for all users. The objective of this project is to effectively educate the average user about common cybersecurity threats so that they are not vulnerable to these types of attacks. The project will create new education modules that are personalized to each user, building on the fact that different users have different personalities and may react to threats in different ways. The result could be more cybersecurity-aware citizens, which could reduce the number of "easy" hacks and cyber thefts. It has already been shown that different models are needed to effectively educate individuals with different personality traits and learning behaviors. There is no "one-size-fits-all" model. The researchers' aims are to 1) increase cybersecurity compliance with schema matching messages, and 2) develop and evaluate the effectiveness of cybersecurity education modules. The researchers have shown that individual differences in personality traits can be used to predict cybersecurity perceptions and practices. The research will classify personalities through analysis of the language of social media. Personalized cybersecurity education modules will then be developed and evaluated. Users' personalities will be assigned based on the "True Colors" Personality Categories, which are based on the Myers-Briggs personality categories, and the Big Five Personality traits. This personalized education module approach could be applied in other areas such as management, teaching, and safety training. Moreover, users will become more security-aware which could lead to a reduction in cybersecurity breaches.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.