中小企对保安资讯共享的保密关注
SMEs' Confidentiality Concerns for Security Information Sharing
摘要：
中小企业被认为是欧盟经济的重要组成部分，但极易受到网络攻击。中小企业有着与大公司不同的具体特点，并影响其采用良好的网络安全实践。为了减轻中小企业的网络安全采用问题，并提高他们对网络威胁的认识，我们设计了一个自定进度的安全评估和能力改进方法，CYSEC。CYSEC是一种安全意识和培训方法，利用自我报告问卷来收集公司关于网络安全意识，实践和漏洞的信息，以生成自动化的咨询建议。然而，对网络安全信息的保密性担忧影响了公司分享信息的意愿。安全信息共享降低了事故风险，并提高了用户在安全意识计划中的自我效能。本文介绍了半结构化访谈的结果与七个首席信息安全官员的中小企业，以评估在线同意沟通的信息共享的动机的影响。根据自决理论对结果进行了分析。研究结果表明，在线同意与多个选项，以表明一个合适的协议水平提高了信息共享的动机。这使许多中小企业能够参与安全信息共享活动，并支持安全专家更好地了解常见漏洞。最终出版物可通过https://doi.org/10.1007/978-3-030-57404-8_22在Springer获得
英文摘要：
Small and medium-sized enterprises are considered an essential part of the EU economy, however, highly vulnerable to cyberattacks. SMEs have specific characteristics which separate them from large companies and influence their adoption of good cybersecurity practices. To mitigate the SMEs' cybersecurity adoption issues and raise their awareness of cyber threats, we have designed a self-paced security assessment and capability improvement method, CYSEC. CYSEC is a security awareness and training method that utilises self-reporting questionnaires to collect companies' information about cybersecurity awareness, practices, and vulnerabilities to generate automated recommendations for counselling. However, confidentiality concerns about cybersecurity information have an impact on companies' willingness to share their information. Security information sharing decreases the risk of incidents and increases users' self-efficacy in security awareness programs. This paper presents the results of semi-structured interviews with seven chief information security officers of SMEs to evaluate the impact of online consent communication on motivation for information sharing. The results were analysed in respect of the Self Determination Theory. The findings demonstrate that online consent with multiple options for indicating a suitable level of agreement improved motivation for information sharing. This allows many SMEs to participate in security information sharing activities and supports security experts to have a better overview of common vulnerabilities. The final publication is available at Springer via https://doi.org/10.1007/978-3-030-57404-8_22
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
