中小企业保密问题和采用良好网络安全实践
SMEs Confidentiality Issues and Adoption of Good Cybersecurity Practices
摘要：
中小型企业（SME）更容易受到网络攻击。然而，基于中小企业的特点，他们没有采取良好的网络安全做法。为了解决中小企业的安全采用问题，我们正在设计一个自己动手（DIY）的安全评估和能力改进方法，CYSEC。在CYSEC的第一次验证中，我们在四家中小企业中进行了多案例研究。我们注意到，保密问题可能会影响用户决定向CYSEC提供相关和准确的安全信息。缺乏准确的信息可能会影响我们的DIY评估方法提供准确的建议。在本文中，我们探讨了动态同意的重要性及其对中小企业信任感知和信息共享的影响。我们讨论了缺乏信任的看法，可以通过应用动态同意来解决。最后，我们描述了三个采访中小企业的结果，并提出如何在CYSEC的新的沟通方式可以帮助我们更好地了解中小企业的态度，共享信息。
英文摘要：
Small and medium-sized enterprises (SME) are considered more vulnerable to cyber-attacks. However, and based on SMEs characteristics, they do not adopt good cybersecurity practices. To address the SMEs security adoption problem, we are designing a do-it-yourself (DIY) security assessment and capability improvement method, CYSEC. In the first validation of CYSEC, we conducted a multi-case study in four SMEs. We observed that confidentiality concerns could influence users decisions to provide CYSEC with relevant and accurate security information. The lack of precise information may impact our DIY assessment method to provide accurate recommendations. In this paper, we explore the importance of dynamic consent and its effect on SMEs trust perception and sharing information. We discuss the lack of trust perception may be addressed by applying dynamic consent. Finally, we describe the results of three interviews with SMEs and present how the new way of communication in CYSEC can help us to understand better SMEs attitudes towards sharing information.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
