Cybersecurity Awareness Among Internet Users

This investigation assessed the behavioral dynamics governing cybersecurity awareness and safety compliance across N = 412 active internet users. Our findings provide convincing empirical evidence that factual knowledge alone does not reliably translate into safe online habits. The pronounced divergence between awareness (88.6%) and daily practice (38.6%) demonstrates that user inaction is primarily driven by configuration friction, mental fatigue, and low self-efficacy rather than simple ignorance. Multivariate regression confirms that bolstering user confidence in operating defensive tools and cultivating realistic risk awareness exerts more than twice the behavioral influence of circulating factual threat warnings. Consequently, academic institutions and application developers must replace passive lecture-based compliance with seamless, friction-free default safeguards that shield consumers without overloading their cognitive bandwidth.

[1] M. Bada and M. A. Sasse, "Cybersecurity awareness campaigns: Why do they fail to change behaviour?" in Proc. Int. Conf. Cyber Situational Awareness, Data Anal. Assessment (CyberSA), 2020, pp. 118–129. [2] S. Hadlington, "Human factors in cybersecurity: Examining the link between internet addiction, impulsivity, and cyberloafing," Comput. Hum. Behav., vol. 115, p. 106606, 2021. [3] R. Wash and E. Cooper, "Who provides cybersecurity advice to non-experts? A study of social sources and trust," IEEE Trans. Prof. Commun., vol. 64, no. 3, pp. 248–262, 2021. [4] M. A. Al-Daeef, N. Basir, and M. T. Saudi, "Evaluating mobile user authentication behaviors through Protection Motivation Theory," IEEE Access, vol. 9, pp. 105214–105228, 2021. [5] N. A. Arachchilage and S. Love, "Security awareness of computer users: A phishing threat avoidance perspective," Comput. Hum. Behav., vol. 38, pp. 304–312, 2014. [6] J. Hair, W. Black, B. Babin, and R. Anderson, Multivariate Data Analysis, 8th ed. London, U.K.: Cengage Learning, 2019. [7] K. Parsons, A. McCormac, M. Pattinson, M. Butavicius, and C. Jerram, "The Human Aspects of Information Security Questionnaire (HAIS-Q): Two further investigations," Comput. Secur., vol. 45, pp. 109–122, 2014. [8] B. Bulgurcu, H. Cavusoglu, and I. Benbasat, "Information security policy compliance: An empirical study of rationality-based beliefs and information security awareness," MIS Q., vol. 34, no. 3, pp. 523–548, 2010. [9] R. W. Rogers, "A protection motivation theory of fear appeals and attitude change," J. Psychol., vol. 91, no. 1, pp. 93–114, 1975. [10] S. Sheng, B. Magnien, P. Kumaraguru, A. Acquisti, L. F. Cranor, J. Hong, and E. Nunge, "Anti-phishing education for the young: Designing an interactive game for children," in Proc. ACM Conf. Comput. Hum. Interact. (CHI), 2020, pp. 889–898.