A Diary Study to Understand Young Saudi Adult Users' Experiences of Online Security Threats

Najla Aldaraani; Helen Petrie; Siamak F. Shahandashti

A Diary Study to Understand Young Saudi Adult Users' Experiences of Online Security Threats

Najla Aldaraani^*, Helen Petrie^*, Siamak F. Shahandashti

^*Corresponding author for this work

Computer Science

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

An online diary study was conducted to investigate the experience of online security threats among Saudi young adults. Over a period of 30 days, 16 participants were asked to record up to three threats they received from online sources on any of their devices. 58 threats were received, and 98 cues were reported in detecting the threats. The Phish Scale proved useful to categorise the detection cues, but needed expansion, largely due to the proliferation of threat types, which can come through many online channels including SMS, WhatsApp and online voice channels. The majority of threats were phishing, with general email phishing and target email phishing (spear phishing) being the most common types. The cues most commonly used to detect threats were those related to language and content of the threat, technical indicators such as the lack of a sender name or email or a suspicious or hidden link to follow, and tactics such as posing as a business or making an offer “too good to be true”.

Original language	English
Title of host publication	IFIP International Symposium on Human Aspects of Information Security & Assurance (HAISA 2024)
Publication status	Accepted/In press - 30 May 2024
Event	International Symposium on Human Aspects of Information Security & Assurance - Skövde, Sweden Duration: 9 Jul 2024 → 11 Jul 2024 Conference number: 18th https://haisa.org/

Conference

Conference	International Symposium on Human Aspects of Information Security & Assurance
Abbreviated title	HAISA 2024
Country/Territory	Sweden
City	Skövde
Period	9/07/24 → 11/07/24
Internet address	https://haisa.org/

Bibliographical note

This is an author-produced version of the published paper. Uploaded in accordance with the University’s Research Publications and Open Access policy.

Keywords

Online Security Threats
Online Security Threat Types
Cues to Detect Online Security Threats
Young Adults
Kingdom of Saudi Arabia
Phishing

Access to Document

HAISA2024-Aldaraani-Petrie-Shahandashti-CR
This is an author-produced version of the published paper. Uploaded in accordance with the University’s Research Publications and Open Access policy.
Accepted author manuscript, 366 KBLicence: CC BY

Cite this

@inproceedings{cf745a61032445699fa5e4c3396b0306,

title = "A Diary Study to Understand Young Saudi Adult Users' Experiences of Online Security Threats",

abstract = "An online diary study was conducted to investigate the experience of online security threats among Saudi young adults. Over a period of 30 days, 16 participants were asked to record up to three threats they received from online sources on any of their devices. 58 threats were received, and 98 cues were reported in detecting the threats. The Phish Scale proved useful to categorise the detection cues, but needed expansion, largely due to the proliferation of threat types, which can come through many online channels including SMS, WhatsApp and online voice channels. The majority of threats were phishing, with general email phishing and target email phishing (spear phishing) being the most common types. The cues most commonly used to detect threats were those related to language and content of the threat, technical indicators such as the lack of a sender name or email or a suspicious or hidden link to follow, and tactics such as posing as a business or making an offer “too good to be true”. ",

keywords = "Online Security Threats, Online Security Threat Types, Cues to Detect Online Security Threats, Young Adults, Kingdom of Saudi Arabia, Phishing",

author = "Najla Aldaraani and Helen Petrie and Shahandashti, {Siamak F.}",

note = "This is an author-produced version of the published paper. Uploaded in accordance with the University{\textquoteright}s Research Publications and Open Access policy.; International Symposium on Human Aspects of Information Security & Assurance, HAISA 2024 ; Conference date: 09-07-2024 Through 11-07-2024",

year = "2024",

month = may,

day = "30",

language = "English",

booktitle = "IFIP International Symposium on Human Aspects of Information Security & Assurance (HAISA 2024)",

url = "https://haisa.org/",

}

TY - GEN

T1 - A Diary Study to Understand Young Saudi Adult Users' Experiences of Online Security Threats

AU - Aldaraani, Najla

AU - Petrie, Helen

AU - Shahandashti, Siamak F.

N1 - Conference code: 18th

PY - 2024/5/30

Y1 - 2024/5/30

N2 - An online diary study was conducted to investigate the experience of online security threats among Saudi young adults. Over a period of 30 days, 16 participants were asked to record up to three threats they received from online sources on any of their devices. 58 threats were received, and 98 cues were reported in detecting the threats. The Phish Scale proved useful to categorise the detection cues, but needed expansion, largely due to the proliferation of threat types, which can come through many online channels including SMS, WhatsApp and online voice channels. The majority of threats were phishing, with general email phishing and target email phishing (spear phishing) being the most common types. The cues most commonly used to detect threats were those related to language and content of the threat, technical indicators such as the lack of a sender name or email or a suspicious or hidden link to follow, and tactics such as posing as a business or making an offer “too good to be true”.

AB - An online diary study was conducted to investigate the experience of online security threats among Saudi young adults. Over a period of 30 days, 16 participants were asked to record up to three threats they received from online sources on any of their devices. 58 threats were received, and 98 cues were reported in detecting the threats. The Phish Scale proved useful to categorise the detection cues, but needed expansion, largely due to the proliferation of threat types, which can come through many online channels including SMS, WhatsApp and online voice channels. The majority of threats were phishing, with general email phishing and target email phishing (spear phishing) being the most common types. The cues most commonly used to detect threats were those related to language and content of the threat, technical indicators such as the lack of a sender name or email or a suspicious or hidden link to follow, and tactics such as posing as a business or making an offer “too good to be true”.

KW - Online Security Threats

KW - Online Security Threat Types

KW - Cues to Detect Online Security Threats

KW - Young Adults

KW - Kingdom of Saudi Arabia

KW - Phishing

M3 - Conference contribution

BT - IFIP International Symposium on Human Aspects of Information Security & Assurance (HAISA 2024)

T2 - International Symposium on Human Aspects of Information Security & Assurance

Y2 - 9 July 2024 through 11 July 2024

ER -