To share or not to share: A behavioral perspective on human participation in security information sharing - HAL Accéder directement au contenu
Article dans une revue Journal of Cybersecurity Année : 2019

To share or not to share: A behavioral perspective on human participation in security information sharing

Résumé

Security information sharing (SIS) is an activity whereby individuals exchange information that is relevant to analyze or prevent cybersecurity incidents. However, despite technological advances and increased regulatory pressure, individuals still seem reluctant to share security information. Few contributions have addressed this conundrum to date. Adopting an interdisciplinary approach, our study proposes a behavioral framework that theorizes how and why human behavior and SIS may be associated. We use psychometric methods to test these associations, analyzing a unique sample of human Information Sharing and Analysis Centre (ISAC) members who share real security information. We also provide a dual empirical operationalization of SIS by introducing the measures of SIS frequency and intensity. We find significant associations between human behavior and SIS. Thus, the study contributes to clarifying why SIS, while beneficial, is underutilized by pointing to the pivotal role of human behavior for economic outcomes. It therefore extends the growing field of the economics of information security. By the same token, it informs managers and regulators about the significance of human behavior as they propagate goal alignment and shape institutions. Finally, the study defines a broad agenda for future research on SIS.
Fichier principal
Vignette du fichier
Mermoud19JoC.pdf ( 394.48 Ko ) Télécharger
Origine : Publication financée par une institution
Loading...

Dates et versions

hal-02147702, version 1 (17-10-2019)

Identifiants

Citer

Alain Mermoud, Marcus Matthias Keupp, Kévin Huguenin, Maximilian Palmié, Dimitri Percia David. To share or not to share: A behavioral perspective on human participation in security information sharing. Journal of Cybersecurity, 2019, 5 (1), pp.13. ⟨10.1093/cybsec/tyz006⟩. ⟨hal-02147702⟩
88 Consultations
115 Téléchargements
Dernière date de mise à jour le 07/04/2024
comment ces indicateurs sont-ils produits

Altmetric

Partager

Gmail Facebook Twitter LinkedIn Plus