Zineb Crowe

March 30th, 2025

Article Review #2: Cyberattacks, Cyber Threats, and Attitudes Toward Cybersecurity Policies

Introduction

The article “Cyberattacks, Cyber Threats, and Attitudes Toward Cybersecurity Policies,” in the Journal of Cybersecurity, discusses public attitudes on cybersecurity threats and policies. This study examines differences in attitudes to cybersecurity measures and compliance with cybersecurity best practices across demographics and social groups. Using survey data and case studies,  the authors study the effectiveness of the existing cybersecurity policy and the obstacles in public involvement in the cyber defense strategies.

Relation to Social Science Principles

This article connects to several core precepts of the social sciences:

Relativism: The research recognizes that attitudes toward cybersecurity are shaped closely by social, cultural, and economic environments.

Skepticism: The authors challenge the adequacy and efficacy of existing cybersecurity policies in practice against real-world cyber threats.

Empiricism: The research is data-centric, using surveys and empirical case studies to study public attitudes and behavior on cybersecurity.

Ethics Neutrality: The authors analyze cybersecurity policies and public perceptions without any moral judgments.

Research Questions and Hypotheses

The primary research questions posed by the authors include:

  • What is the individual perception of the severity of cyber threats?
  • What shapes public attitudes on cybersecurity policies?
  • How do education and socioeconomic status impact understanding and adherence to cybersecurity?

Individuals with more education and access to cybersecurity resources are likely to show support for policies that reduce the effectiveness of supported systems because they are most directly able to initiate and follow these policies, whereas those in marginalized communities are less likely to believe support policies are necessary or will benefit everyone equally.

Research Methods Used:

The study uses a mixed-methods approach, combining:

  • Quantitative Analysis: Statistical analysis of survey data on attitudes towards cybersecurity policies.
  • Qualitative Case Studies: Reviews of real-world cyber events and interviews with people affected by cyber threats.
  • Policy Analysis:  effectiveness of existing cybersecurity policies to address the public concern and prevent cyber threats.

Data and Analysis

The researchers drew data from national cybersecurity surveys,  case studies of cyber incidents, and policy reviews. They applied statistical modeling to identify patterns in the data that best capture public attitudes about cybersecurity. The results indicate that, overall, cybersecurity policies are perceived as valuable, yet there is a considerable lack of awareness among lower-income and less-educated populations, as well as a lack of compliance. People who have experienced cyber threats were also more likely to support stricter measures, the study found.

Relation to Course Concepts

The article discusses cybersecurity as an interdisciplinary problem, incorporating lenses from psychology, public policy, and technology. It presents ethical challenges in the cybersecurity field and discusses methodological issues encountered by researchers in the field, especially in survey-related studies, in measuring public perceptions of cyber threats and security policies.

Challenges, Concerns, and Contributions of Marginalized Groups

The article addresses important issues impacting marginalized groups:

  • Limited Access to cybersecurity education: People in lower-income communities are often not formally trained or made aware of best cybersecurity practices.
  •  Distrust in Institutions: Historical distrust in government and corporate entities often leads to resistance towards cybersecurity policies.
  • Greater Exposure to Cyber Threats: Marginalized populations have weaker cybersecurity defenses, making them prime targets for cybercriminals

Overall Contributions to Society

The study makes numerous significant contributions to society:

  • Digital Equity: Promoting initiatives that increase access to cybersecurity resources for marginalized populations.
  • Developing Cybersecurity Policy: Evidence-based recommendations for improving cybersecurity education and securing public trust in cybersecurity measures.
  • Awareness Raising: Highlighting gaps in public knowledge of threats and policies.

Conclusion

This article illustrates the interplay between public perceptions, cyber threats, and the efficacy of policy. Using some important concepts of social science approaches, the paper creates better insight into how to understand how individuals think about and interact with cybersecurity efforts. To build a better-functioning society, it is important to have the right policies that help reduce the disparity between those who understand cybersecurity and trust those protecting it and those who do not.

Reference

Snider, K. L. G., Shandler, R., Zandani, S., & Canetti, D. (2021). Cyberattacks, cyber threats, and attitudes toward cybersecurity policies. Journal of Cybersecurity, 7(1), tyab019. https://doi.org/10.1093/cybsec/tyab019

The link to the article is: https://academic.oup.com/cybersecurity/article/7/1/tyab019/6382745?searchresult=1