Search papers, labs, and topics across Lattice.
This study investigates the cybersecurity attitudes and experiences of computing university students, revealing a paradox where students exhibit reasonable awareness yet harbor persistent misconceptions about online safety. Through thematic analysis and cluster analysis of survey data from 236 participants, the research identifies four key tensions in students' cybersecurity perceptions, including a reliance on external sources for safety knowledge and varying levels of confidence and preparedness. The findings highlight significant inconsistencies in students' practices and perceptions of responsibility, suggesting a need for improved educational support in cybersecurity.
Despite being tech-savvy, computing students hold persistent misconceptions about cybersecurity and often rely on external sources for safety knowledge.
Today's young adults are most immersed in technology, leading in feelings of powerlessness in managing online privacy across many platforms, and particularly susceptible to phishing attacks. This raises questions about their general, wide-ranging attitudes towards and management of cybersecurity. How do young, tech-savvy adults approach cybersecurity? We seek a better understanding of their cybersecurity knowledge, attitudes and experiences, in particular in addressing deceptive online communications. We surveyed a group of `lead users': computing university students (n = 236). By combining thematic analysis of open-ended responses with quantitative data, we provide insights into their experiences and perceptions. While students demonstrate reasonable cybersecurity awareness, their cybersecurity experiences vary, and inconsistencies exist around their practices, perceptions of responsibility, and support structures. Findings also reveal four key thematic tensions: 1) Computing students are knowledgeable yet have persistent incorrect beliefs, 2) They learn more about keeping safe from sources outside the classroom, 3) They have limited assistance and have fallen victim to cybercrime, and 4) Many are confident, yet others are concerned about their own safety and responsibility. Through cluster analysis of attitudes, we identify two groups, with one feeling less prepared, less confident, yet expressing a desire to learn more. Established measures of intentions and objective knowledge were correlated to preparedness. Self-efficacy correlated to confidence and predicted cluster membership.