Studying users' computer security behavior: A health belief perspective

Decision Support Systems

Volumn 46, Issue 4, 2009, Pages 815-825

  Ng, Boon Yuen ^a   Kankanhalli, Atreyi ^a  

^a Calvin)   (Singapore)

Author keywords

Computer security; Email attachment; Health belief model; Security awareness; Virus

Indexed keywords

ELECTRONIC MAIL; HEALTH; MEDICAL COMPUTING; SECURITY OF DATA; SECURITY SYSTEMS; VIRUSES;

COMPUTER SECURITY; EMAIL ATTACHMENT; PERCEIVED BENEFITS; PERCEIVED SUSCEPTIBILITIES; SECURITY AWARENESS; SELF EFFICACIES; SURVEY DATUM;

COMPUTER VIRUSES;

EID: 61349092288     PISSN: 01679236     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.dss.2008.11.010     Document Type: Article

References (52)

1. Abraham C., and Sheeran P. The health belief model. In: Conner M., and Norman P. (Eds). Predicting Health Behaviour, Ch. 2 (2005), Open University Press, UK
2. Ah D.V., Ebert S., Ngamvitroj A., Park N., and Kang D.-H. Predictors of health behaviors in college students. Journal of Advanced Nursing 48 5 (2004)
3. Ajzen I. The theory of planned behavior. Organizational Behavior and Human Decision Processes 50 (1991)
4. Aytes K., and Connolly T. A research model for investigating human behavior related to computer security. Proceedings of the Ninth Americas Conference on Information Systems (2003)
5. Bandura A. Self-efficacy: towards a unifying theory of behavioral change. Psychological Review 84 2 (1977)
6. Champion V.L. Instrument development for health belief model constructs. Advances in Nursing Science 6 3 (1984)
7. Chan M., Woon I., and Kankanhalli A. Perceptions of information security in the workplace: linking information security climate to compliant behavior. Journal of Information Privacy and Security 1 3 (2005)
8. Chung W., Chen H., Chang W., and Chou S. Fighting Cybercrime: a review and the Taiwan experience. Decision Support Systems 41 (2006)
9. Churchill Jr. G.A. A paradigm for developing better measures of marketing constructs. Journal of Marketing Research 6 1 (1979)
10. Cohen J., Cohen P., West S.G., and Aiken L.S. Applied Multiple Regression/Correlation Analysis for the Behavioral Sciences. 3rd ed. (2003), L/ Erlbaum Associates, Mahwah, N.J.
11. Compeau D.R., and Higgins C. Application of social cognitive theory to training for computer skills. Information Systems Research 6 2 (1995)
12. Compeau D.R., and Higgins C. Computer self-efficacy: development of a measure and initial test. MIS Quarterly 19 2 (1995)
13. Conner M., and Norman P. Predicting health behaviour: a social cognition approach. In: Conner M., and Norman P. (Eds). Predicting Health Behaviour, Ch. 1 (2005), Open University Press
14. Davis F.D. Perceived usefulness, perceived ease of use, and user acceptance of information technology. MIS Quarterly 13 3 (1989)
15. Dinev T., and Hu Q. The centrality of awareness in the formation of user behavioral intention toward protective information technologies. Journal of the Association for Information Systems 8 7 (2007)
16. Eccles J.S., and Wigfield A. Motivational beliefs, values, and goals. Annual Review Psychology 53 (2002)
17. Falk R.F., and Miller N.B. A Primer for Soft Modeling (1992), The University of Akron Press, Akron, OH
18. Gordon L.A., Loeb M.P., Lucyshyn W., and Richardson R. CSI/FBI Computer Crime and Security Survey (2006), Computer Security Institute. http://www.gocsi.com/forms/fbi/csi_fbi_survey.jhtml (July 2006). Accessed 9 Nov 2006 at http://www.gocsi.com/forms/fbi/csi_fbi_survey.jhtml
19. Grance T., Kent K., and Kim B. Computer Security Incident Handling Guide (Jan 2004), National Institute of Standards and Technology. http://csrc.nist.gov/publications/nistpubs/800-61/sp800-61.pdf Special Publication 800-61. Accessed 29 Sept 2006 at http://csrc.nist.gov/publications/nistpubs/800-61/sp800-61.pdf
20. Groenewold G., Bruijn B., and Bilsborrow R. Migration of the Health Belief Model (HBM): Effects of psychosocial and migrant network characteristics on emigration intentions in five countries in West Africa and the Mediterranean Region. The Population Association of America 2006 Annual Meeting, March 30-April 1, Los Angeles, CA (2006)
21. Hair J.F., Anderson R.E., Tatham R.L., and Black W.C. Multivariate Data Analysis. 5th ed (1998), Prentice-Hall, Englewood Cliffs, NJ
22. Hedrick A.M. The effects of piracy in foreign markets on U.S. business. Journal of International Business Studies 21 4 (1990)
23. Jaccard J., Turrisi R., and Wan C.K. Interaction effects in multiple regression. Series: Quantitative Applications in the Social Sciences, No. 72 (1990), Sage Publications, Thousand Oaks, CA
24. Janz N.K., and Becker M.H. The health belief model: a decade later. Health Education Quarterly 11 (1984)
25. Jayanti R.K., and Burns A.C. The antecedents of preventive health care behavior: an empirical study. Academy of Marketing Science Journal 26 1 (1998)
26. Kankanhalli A., Teo H.H., Tan B.C.Y., and Wei K.K. An integrative study of information systems security effectiveness. International Journal of Information Management 23 (2003)
27. LaRose R., Rifon N., Liu S., and Lee D. Online safety strategies: a content analysis and theoretical assessment. The 55th Annual Conference of the International Communication Association, New York City (2005)
28. LaRose R., Rifon N., Liu S., and Lee D. Understanding online safety behavior: a multivariate model. The 55th Annual Conference of the International Communication Association, New York City (2005)
29. LaRose R., Rifon N., and Enbody R. Promoting personal responsibility for Internet safety. Communications of the ACM 51 3 (2008)
30. Milne S., Sheeran P., and Orbell S. Prediction and intervention in health-related behavior: a meta-analytic review of protection motivation theory. Journal of Applied Social Psychology 30 1 (2000)
31. Moore G.C., and Benbasat I. Development of an instrument to measure the perceptions of adopting an information technology innovation. Information Systems Research 2 (1991)
32. Neuman W.L. Social Research Methods: Qualitative and Quantitative Approaches. 5th ed. (2003), Allyn Bacon
33. Ng B.Y., and Rahim M.A. A socio-behavioral study of home computer users' intention to practice security. Proceedings of the Ninth Pacific Asia Conference on Information Systems, 7-10 July, Bangkok, Thailand (2005)
34. Nunnally J.C. Psychometric Theory (1978), McGraw-Hill, New York
35. Rhodes K. Operations security awareness: the mind has no firewall. Computer Security Journal 18 3 (2001)
36. Richardson R. CSI Survey 2007: The 12th Annual Computer Crime and Security Survey (2007), Computer Security Institute. http://www.gocsi.com Accessed 11 October, 2007 at http://www.gocsi.com
37. Rimal R.N. Closing the knowledge-behavior gap in health promotion: the mediating role of self-efficacy. Health Communication 12 3 (2000)
38. Rogers L. Home Computer Security, CERT Coordination Centre (2002). http://www.cert.org/homeusers/HomeComputerSecurity/ Accessed 19 September 2006 at http://www.cert.org/homeusers/HomeComputerSecurity/
39. Rosenstock I.M. Why people use health services. The Milbank Memorial Fund Quarterly 44 3 (1966)
40. Rosenstock I.M. The health belief model and preventive health behavior. Health Education Monographs 2 (1974)
41. Rosenstock I.M., Strecher V.J., and Becker M.H. Social learning theory and the health belief model. Health Education Quarterly 15 (1988)
42. Schaeffer N.C., and Presser S. The science of asking questions. Annual Review of Sociology 29 (2003)
43. Stanton J.M., Mastrangelo P.R., Stam K.R., and Jolton J. Behavioral information security: two end user survey studies of motivation and security practices. Proceedings of the Tenth America's Conference on Information Systems, New York (2004)
44. Stoneburner G., Goguen A., and Feringa A. Risk Management Guide for Information Technology Systems (2002), National Institute of Standards and Technology SP800-30
45. Straub D.W. Validating instruments in MIS research. MIS Quarterly 13 2 (1989)
46. Straub D.W., and Welke R.J. Coping with systems risk: security planning models for management decision making. MIS Quarterly 22 4 (1998)
47. Thomson M.E., and Solms R.V. Information security awareness: educating your users effectively. Information Management and Computer Security 6 4 (1998)
48. Vroom V.H. Work and Motivation (1964), Wiley, New York
49. Walker L.R., and Thomas K.W. Beyond expectancy theory: an integrative motivational model from health care. Academy of Management Review 7 2 (1982)
50. Witte K., and Allen M. A meta-analysis of fear appeals: implications for effective public health campaigns. Health Education Behavior 27 5 (2000)
51. Woon I.M.Y., Tan G.W., and Low R.T. A protection motivation theory approach to home wireless security. Proceedings of the Twenty-Sixth International Conference on Information Systems, Las Vegas, Nevada, USA (2005)
52. Yue W.T., Cakanyilidrim M., Ryu Y.U., and Liu D. Network externalities, layered protection and IT security risk management. Decision Support Systems 44 (2007)