The Importance of Conceptualising the Human-Centric Approach in Maintaining and Promoting Cybersecurity-Hygiene in Healthcare 4.0
Source abstract
Abstract
The cyberspace depicts an increasing number of difficulties related to security, especially in healthcare. This is evident from how vulnerable critical infrastructures are to cyberattacks and are unprotected against cybercrime. Users, ideally, should maintain a good level of cyber hygiene, via regular software updates and the development of unique passwords, as an effective way to become resilient to cyberattacks. Cyber security breaches are a top priority, and most users are aware that their behaviours may put them at risk; however, they are not educated to follow best practices, such as protecting their passwords. Mass cyber education may serve as a means to offset poor cyber security behaviours; however, mandatory education becomes a questionable point if the content is not focused on human factors, using human-centric approaches and taking into account end users’ behaviours, which is currently the case. The nature of the present paper is largely exploratory, and the purpose is two-fold: To present and explore the cyber hygiene definition, context and habits of end users in order to strengthen our understanding of users. Our paper reports the best practices that should be used by healthcare organisations and healthcare professionals to maintain good cyber hygiene and how these can be applied via a healthcare use case scenario to increase awareness related to data privacy and cybersecurity. This is an issue of great importance and urgency considering the rapid increase of cyberattacks in healthcare organisations, mainly due to human errors. Further to that, based on human-centric approaches, our long-term vision and future work involves facilitating the development of efficient practices and education associated with cybersecurity hygiene via a flexible, adaptable and practical framework.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Information and Cyber Security · User Authentication and Security Systems · Advanced Malware Detection Techniques
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Institute of Analytics and Data Science (IADS), School of Computer Science and Electronic Engineering, University of Essex, Colchester SO4 3SQ, UK
Trustilio B.V., 681017 Amsterdam, The Netherlands
Centre for Secure, Intelligent and Usable Systems (CSIUS), School of Sport & Health Sciences, University of Brighton, Brighton BN2 4AT, UK
Department of Learning, Management and Ethics, Karolinska Institute, 17177 Solna, Sweden
Funding
‘A Dynamic and Self-Organized Artificial Swarm Intelligence Solution for Security and Privacy Threats in Healthcare ICT Infrastructures’ (AI4HEALTHSEC) · European Union’s Horizon 2020 research and innovation programme
References (63)
Show source-provided references
1. A Human-Centric Approach to Cybersecurity: Securing the Human in the Era of Cyberphobia
2. Javid, T., Faris, M., Beenish, H., and Fahad, M. (2020, January 9–10). Cybersecurity and data privacy in the cloudlet for preliminary healthcare big data analytics. Proceedings of the 2020 International Conference on Computing and Information Technology, Tabuk, Saudi Arabia.10.1109/ICCIT-144147971.2020.9213712 ↗
3. Thuemmler, C., and Bai, C. (2017). Health 4.0: How Virtualization and Big Data Are Revolutionizing Healthcare, Springer.10.1007/978-3-319-47617-9 ↗
4. Cyber-hygiene: The key Concept for Cyber Security in Cyberspace
5. An exploratory study of cyber hygiene behaviors and knowledge
6. Ponemon Institute (2023, January 01). Available online: http://www.ponemon.org/li-brary/2016-cost-of-cyber-crime-study-the-risk-of-business-innovation.
7. FBI (2022, December 15). Available online: https://www.ic3.gov/media/annualreports.aspx.
8. Long, R. (2013). Using Phishing to Test Social Engineering Awareness of Financial Employees. [Ph.D. Thesis, Eastern Washington University].
9. Self-reported secure and insecure cyber behaviour: Factor structure and associations with personality factors
10. Talib, S., Clarke, N.L., and Furnell, S.M. (2010, January 15–18). An analysis of information security aware-ness within home and work environments. Proceedings of the International Conference on Availability, Reliability, and Security, Krakow, Poland.10.1109/ARES.2010.27 ↗
11. Practicing safe computing: A multimedia empirical examination of home computer user security behavioral intentions10.2307/25750694 ↗
12. USAFR NJT. SEADE: Countering the futility of network security
13. Why users cannot use security10.1016/j.cose.2005.04.003 ↗
14. Henshel, Q., Hart, P., and Cooke, D. (2006, January 4–7). The role of external influences on organizational information security practices: An institutional perspective. Proceedings of the 39th Annual Hawaii International Conference on System Sciences 2006, Kauia, HI, USA.
15. Cyberwarfare and digital governance10.1109/MIC.2017.23 ↗
16. Neigel, A.R., Claypoole, V.L., Waldfogle, G.E., Acharya, S., and Hancock, G.M. (2020). Holistic cyber hygiene education: Accounting for the human factors. Comput. Secur., 92.10.1016/j.cose.2020.101731 ↗
17. Cyber security for everyone: An introductory course for nontechnical majors
18. A video game for cyber security training and awareness10.1016/j.cose.2006.10.005 ↗
19. Molinara, M., Cancelliere, R., Di Tinno, A., and Ferrigno, L. (2022). A Deep Learning Approach to Organic Pollutants Classification Using Voltammetry. Sensors, 22.10.3390/s22208032 ↗
20. From product recommendation to cyber-attack prediction: Generating attack graphs and predicting future attacks10.1007/s12530-018-9234-z ↗
21. Silvestri, S., Islam, S., Papastergiou, S., Tzagkarakis, C., and Ciampi, M. (2023). A Machine Learning Approach for the NLP-Based Analysis of Cyber Threats and Vulnerabilities of the Healthcare Ecosystem. Sensors, 23.10.3390/s23020651 ↗
22. European Union Agency for Network and Information Security (ENISA) (2022, November 30). Review of Cyber Hygiene Practices, Available online: https://www.enisa.europa.eu/publications/cyber-hygiene.
23. Trevors, M. (2023, January 03). Mapping Cyber Hygiene to the NIST Cybersecurity Framework. Available online: https://insights.sei.cmu.edu/insider-threat/2019/10/mapping-cyber-hygiene-to-the-nist-cybersecurity-framework.html.
24. Cyber hygiene: The concept, its measure, and its initial tests10.1016/j.dss.2019.113160 ↗
25. Wannacry, cybersecurity and health information technology: A time to act10.1007/s10916-017-0752-1 ↗
26. (2023, January 03). Independent. Available online: https://www.independent.co.uk/news/uk/home-news/marcus-hutchins-arrested-latest-us-authorities-wannacry-cyberattack-nhs-las-cegas-mccaran-a7875761.html.
27. Exploring Historical And Emerging Phishing Techniques And Mitigating The Associated Security Risks
28. Comparative Analysis of Clustering Techniques in Cloud for Effective Load Balancing10.14419/ijet.v7i3.4.14674 ↗
29. Kelly, R. (2022, December 05). Almost 90% of Cyber Attacks Are Caused by Human Error or Behaviour. Available online: https://chiefexecutive.net/almost-90-cyber-attacks-caused-human-error-behavior/.
30. Understanding the management of cyber-resilient systems10.1016/j.cie.2020.106829 ↗
31. Bowen, B., Devarajan, R., and Stolfo, S. (2011, January 13–16). Measuring the human factor of cyber security. Proceedings of the 2011 IEEE International Conference on Technologies for Homeland Security (HST), Waltham, MA, USA.10.1109/THS.2011.6107876 ↗
32. Botching human factors in cybersecurity in business organizations
33. Dragana, C., Pattinson, M.R., Parsons, K., Butavicius, M.A., and McCormac, A. (2016, January 19–21). Naïve and Accidental Behaviours that Compromise Information Security: What the Experts Think. Proceedings of the 10th International Symposium of Human Aspects of Information Security and Assurance, Frankfurt, Germany.
34. Baillon, A., Bruin, J., Emirmahmutoglu, A., Veer, E., and Dijk, B. (2019). Informing, simulating experience, or both: A field experiment on phishing risks. PLoS ONE, 14.10.1371/journal.pone.0224216 ↗
35. The phishing email suspicion test (PEST) a lab-based task for evaluating the cognitive mechanisms of phishing detection10.3758/s13428-020-01495-0 ↗
36. Human factor aspects in information security management in the traditional IT and cloud computing models
37. Planning for Cyber Security in Schools: The Human Factor
38. The Role of User Behaviour in Improving Cyber Security Management10.3389/fpsyg.2021.561011 ↗
39. A review on future episodic thinking in mood and anxiety disorders10.1515/revneuro-2017-0055 ↗
40. Not all drugs are created equal: Impaired future thinking in opiate, but not alcohol, users10.1007/s00221-018-5355-7 ↗
41. (2023, January 18). Wikipedia. Available online: https://en.mwikipedia.org/wiki/social_engineering(security).
42. Chen, H., Zhongchuan, F., and Dongyan, Z. (2011, January 10–12). Security and trust research in M2M system. Proceedings of the 2011 IEEE International Conference on Vehicular Electronics and Safety, Beijing, China.
43. Sung-Ming, Y., Kim, S., Lim, S., and Moon, S. (2001, January 6–7). A countermeasure against one physical cryptanalysis may benefit another attack. Proceedings of the International Conference on Information Security and Cryptology, Seoul, Republic of Korea.10.1007/3-540-45861-1_31 ↗
44. Gregory, R.G., Fitzgerald, J., Hunsperger, N., Lavine, J., Nguyen, V., and Tellado, J. (2014). Service Processor Configurations for Enhancing or Augmenting System Software of a Mobile Communications Device. (Application 14/083,324), U.S. Patent.
45. Holland, N. (2022, October 01). The Human-Centered Cybersecurity Stance. Available online: https://www.bankinfosecurity.com/human-centric-cybersecurity-stance-a-13897.
46. Usage and Usability: Redefining Human Centric Cyber Security10.3389/fdata.2021.583723 ↗
47. Durbin, S. (2023, January 05). Eight Steps to Building a Human-Centered Security Culture. Available online: https://www.forbes.com/sites/forbesbusinesscouncil/2020/11/25/eight-steps-to-building-a-human-centered-security-culture/.
48. Contemplating human-centred security & privacy research: Suggesting future directions
49. Khader, M., Chai, W., and Neo, L.S. (2021). Introduction to Cyber Forensic Psychology: Understanding the Mind of the Cyber Deviant Perpetrators, World Scientific Publishing. [1st ed.].10.1142/12164 ↗
50. Blau, A. (2022, December 01). Better Cybersecurity Starts with Fixing Your Employees Bad Habits. Available online: https://hbr.org/2017/12/bettercybersecurity-starts-with-fixing-your-employees-badhabits.
51. Ncubukezi, T., Mwansa, L., and Rocaries, F. (2020, January 8–10). A review of the current cyber hygiene in small and medium sized businesses. Proceedings of the 15th International Conference for Internet Technology and Secured Transactions (ICITST), London, UK.10.23919/ICITST51030.2020.9351339 ↗
52. Internet Security Threat Report: 2011 Trends
53. Sobiesk, E., Blair, J.R., Conti, G., Lanham, M., and Taylor, H. (2015, January 4–8). Cyber education: A multilevel, multi-discipline approach. Proceedings of the 16th Annual Conference on Information Technology Education, London, UK.10.1145/2808006.2808038 ↗
54. Best practices used by businesses to maintain good cyber hygiene during COVID-19 pandemic10.20533/jitst.2046.3723.2021.0086 ↗
55. Trevors, M., and Wallen, C.M. (2017). Cyber Hygiene: A Baseline Set of Practices, Software Engineering Institute, Carnegie Mellon University.
56. (2023, January 26). Cyber Essentials, Available online: https://www.gov.uk/gov.
57. Basic cyber hygiene: Does it work?10.1109/MC.2018.2888766 ↗
58. (2022, October 03). NIST Special Publication 800–181, Available online: https://www.nist.gov/itl/applied-cybersecurity/nice/nice-framework-resource-center.
59. Mehravari, N. (2013, January 17–20). Resilience management through the use of CERT-RMM and associated success stories. Proceedings of the IEEE, International Conference on Technologies for Homeland Security (HST), Vienna, Austria.10.1109/THS.2013.6698986 ↗
60. Martin, R.A. (2022, November 04). Non-Malicious Taint: Bad Hygiene Is as Dangerous to the Mission as Malicious Intent. 2014; Volume 1, pp. 19–30. Available online: https://apps.dtic.mil/sti/pdfs/AD1107757.pdf.
61. The human aspects of information security questionnaire (HAIS-Q): Two further validation studies10.1016/j.cose.2017.01.004 ↗
62. A Meta-Analysis of Factors Affecting Trust in Human-Robot Interaction10.1177/0018720811417254 ↗
63. The impact of personal dispositions on in-formation sensitivity, privacy concern and trust in dis-closing health information online10.1016/j.dss.2010.01.010 ↗