Perception of information security

Behaviour and Information Technology

Volumn 29, Issue 3, 2010, Pages 221-232

  Huang, Ding Long ^a   Rau, Pei Luen Patrick ^a   Salvendy, Gavriel ^a,b  

^a TSINGHUA UNIVERSITY   (China)

^b SCHOOL OF INDUSTRIAL ENGINEERING   (United States)

Author keywords

Factor analysis; Information security; Perception; Survey study

Indexed keywords

COMPUTER EXPERIENCE; EXPLORATORY FACTOR ANALYSIS; FACTOR ANALYSIS; FACTOR STRUCTURE; INFORMATION SECURITY; MULTIPLE REGRESSION ANALYSIS; TROJAN HORSE;

COMPUTER CRIME; PERSONAL COMPUTING; QUALITY OF SERVICE; REGRESSION ANALYSIS; VIRUSES;

SURVEYS;

EID: 77952006209     PISSN: 0144929X     EISSN: 13623001     Source Type: Journal    
DOI: 10.1080/01449290701679361     Document Type: Article

References (45)

1. Berinato, S., 2005. The Global State of Information Security 2005. Available online at: http://www.csoonline.com/read/100105/survey.html) (accessed 16 April 2006).
2. Chai, S., Bagchi-Sen, S., Morrell, C., Rao, H. R., and Upadhyaya, S., 2006. Role of perceived importance of information security: an exploratory study of middle school children's information security behavior. In: Informing Science and Information Technology Conference Pro. 2006, Greater Manchester, England.
3. China Internet Network Information Center, 2006. The statistics report of the development of Internet in China. Available online at: http://www.cnnic. net.cn/index/0E/00/11/index.htm (accessed 17 April 2006).
4. Cooper, D., 2003. Psychology, risk & safety: understanding how personality & perception can influence risk taking. Professional Safety, 48, 39-46.
5. Covello, V. T., 1983. The perception of technological risks: a literature review. Technological Forecasting Social Change, 23, 285-297.
6. Covello, V. T., 1992. Risk communication: an emerging area of health communication research. In: S. Deetz, ed. Communication Yearbook. 15th ed., pp. 359-373 (Beverly Hills: Sage).
7. Covello, V. T. and Merkhofer, M. W., 1994. Risk assessment methods. New York: Plenum.
8. Douglas, M. and Wildavsky, A., 1982. Risk and culture. Berkeley: University of California Press.
9. Featherman, M. S. and Pavlou, P. A., 2003. Predicting e-services adoption: a perceived risk facets perspective. International Journal of Human-Computer Studies, 59, 451-474.
10. Fischhoff, B., Slovic, P., Lichtenstein, S., Read, S., and Cambs, B., 1978. How safe is safe enough? A psychometric study of attitudes towards technological risks and benefits. Policy Sciences, 9, 127-152.
11. Gonzalez, J. J. and Sawicka, A., 2002. A framework for human factors in information security. In: Proceedings of the 2002 WSEAS International Conference on Information Security (ICIS'02), Rio de Janeiro.
12. Gorden, L. A., Loeb, M. P., Lucyshyn, W., and Richardson, R., 2006. 2006 CSI/FBI computer crime and security survey. Available online at: http://www.gocsi.com (accessed 9 January 2007).
13. Hassel, L. and Wiedenbeck, S., 2004. Human Factors and Information Security. DIMACS Workshop on Usable Privacy and Security Software, 7-8 July 2004, DIMACS Centre, CORE Building, Rutges University, Piscataway, NJ.
14. Holtgrave, D. R. and Weber, E. U., 1993. Dimensions of risk perception for financial and health risks. Risk Analysis, 13, 553-558.
15. Jackson, J., Allum, N., and Gaskell, G., 2005. Perceptions of risk in cyberspace. In: R. Mansell and B. S. Collins, eds. Trust and Crime in Information Societies. Cheltenham: Edward Elgar. Available online at http://www/lse.ac. uk/collections/methodologyInstitute/pdf/JonJackson/ perceptions%2007%20risk%20in%20cyberspace.pdf.
16. Jih, W.-J., Wong, S.-Y., and Chang, T.-B., 2005. Effects of perceived risks on adoption of Internet banking services: an empirical investigation in Taiwan. International Journal of e-Business Research, 1, 70-88.
17. Lim, N., 2003. Consumers' perceived risk: sources versus consequences. Electronic Commerce Research and Applications, 2, 216-228.
18. MacDonald, G., 2006. Risk perception and construction safety. Proceedings of the Institution of Civil Engineers: Civil Engineering, 159, 51-56.
19. McDaniels, T., Axelrod, L. J., and Slovic, P., 1995. Characterizing perception of ecological risk. Risk Analysis, 15, 575.
20. Musekura, J. B. and Ekh, R., 2004. Information security issues - difference between perception and practice in organizations. Available online at: http://www.oru.se/templates/oruExtNormal-19402.aspx (accessed 6 January 2007). Department of Business, Economics, Statistics and Informatics, Orebro University, Sweden.
21. NSTISSC, 1994. National Training Standard for Information Systems Security (Infosec) Professionals. National Security Telecommunications and Information Systems Security Committee.
22. Nunnally, J. C., 1978. Psychometric theory. New York: McGraw-Hill.
23. Pikkarainen, T., Pikkarainen, K., Karjaluoto, H., and Pahnila, S., 2004. Consumer acceptance of online banking: an extension of the technology acceptance model. Internet Research, 14, 224-235.
24. Salvendy, G., 1997. Handbook of human factors and ergonomics. New York: Wiley-Interscience.
25. Schultz, E. E., Proctor, R. W., Lien, M. C., and Salvendy, G., 2001. Usability and security: an appraisal of usability issues in information security methods. Computers and Security, 20, 620.
26. Setbon, M., Raude, J., Fischler, C., and Flahault, A., 2005. Risk perception of the "mad cow disease" in France: determinants and consequences. Risk Analysis, 25, 813-826.
27. Siegrist, M., Keller, C., and Kiers, H. A. L., 2005. A new look at the psychometric paradigm of perception of hazards. Risk Analysis, 25, 211-222.
28. Sjoberg, L., 2000. Factors in risk perception. Risk Analysis, 20, 1-11.
29. Sjoberg, L., 2003. Distal factors in risk perception. Journal of Risk Research, 6, 187.
30. Sjoberg, L. and Drottz-Sjoberg, B.-M., 1991. Knowledge and risk perception among nuclear power plant employees. Risk Analysis, 11, 607.
31. Slovic, P., 1987. Perception of risk. Science, 236, 280-285.
32. Slovic, P., Fischhoff, B., and Lichtenstein, S., 1980. Facts and fears - understanding risk. Societ al. Risk Assessment - How Safe is Safe Enough?. New York: Plenum, 181-218. R. C. Schwing and W. A. Albers (Eds.).
33. Stainer, A. and Stainer, L., 1995. Young people's risk perception of nuclear power - a European viewpoint. International Journal of Global Energy Issues, 7, 261-270.
34. Starr, C., 1969. Social benefit versus technological risk. Science, 165, 1232-1238.
35. Stewart, A., 2004. On risk: perception and direction. Computers and Security, 23, 362-370.
36. Suh, B. and Han, I., 2003. The impact of customer trust and perception of security control on the acceptance of electronic commerce. International Journal of Electronic Commerce, 7, 135-161.
37. Thomson, K. and von Solms, R., 2005. Information security obedience: a definition. Computers & Security, 24, 69-75.
38. Turner, D., Entwisle, S., Fossi, M., Blackbird, J., McKinney, D., Conneff, T., and Whitehouse, O., 2006. Symantec Internet security threat report - trends for January 06 to June 06. Available online at: http://www.symantec.com (17 January 2007).
39. UNCTAD, 2005. Information economy report (United Nations Conference on Trade and Development). Available online at: http://www.unctad.org (accessed 17 April 2006).
40. Vyskoc, J. and Fibikova, L., 2001. IT users' perception of information security. In: 2nd Working Conference on Security and Control of Information Technology in Security, Bratislava, Bratislava: Comenius University, 107.
41. Whitman, M. E., 2003. Enemy at the gate: threats to information security. Communications of the ACM, 46, 91-95.
42. Whitman, M. E. and Mattford, H. J., 2004. Principles of information security. Boston, MA: Thomson Learning.
43. Wogalter, M. S., Brelsford, J. W., Desaulniers, D. R., and Laughery, K. R., 1991. Consumer product warnings. The role of hazard perception. Journal of Safety Research, 22, 71.
44. Yang, K. C. C., 2005. Exploring factors affecting the adoption of mobile commerce in Singapore. Telematics and Informatics, 22, 257-277.
45. Yenisey, M. M., Ozok, A. A., and Salvendy, G., 2005. Perceived security determinants in e-commerce among Turkish university students. Behaviour & Information Technology, 24, 259-274.