Cyber Threat Awareness, Protective Measures and Communication Preferences in Germany: Implications from Three Representative Surveys (2021-2024)

Research Background and Issues

• Identified Problems or Challenges:
  The authors point out that although German citizens have a relatively high awareness of cyber threats, their understanding of how to respond to cyberattacks remains insufficient. Furthermore, there is a lack of trust in Germany's security agencies to protect citizens and critical infrastructure. The study also reveals gaps in personal security behaviors, age-related differences in awareness, and preferences for information communication.

• Importance of the Study:
  With the increasing digitization and expansion of cyber infrastructure, cyberattacks are becoming more frequent and complex. Citizens need to acquire basic knowledge of threat awareness and security measures. This is not only essential for personal safety but also for better protection of societal infrastructure.

• Motivation and Related Work:
  Previous studies have sporadically investigated the cybersecurity behaviors of German citizens, but significant research gaps remain in analyzing correlations with demographic variables, time trends, and preferences for communicating cyber threat information. Additionally, there is a lack of systematic research on public expectations for accessing cybersecurity information.

Proposed Solutions

• Proposed Methods or Solutions:
  The authors designed and conducted three representative surveys (2021, 2023, 2024) to analyze citizens' perceptions of cyber threats, their implementation of security measures, and their preferred communication methods for information dissemination.

• Innovative Aspects:
  This study is the first to use longitudinal data, integrating three datasets for statistical and comparative analysis. Furthermore, it expands research on the correlations between demographic variables (e.g., age, gender) and time factors with cybersecurity behaviors and attitudes.

• Implementation Steps and Key Techniques:

  1. Survey Design: Collaborated with cybersecurity experts and researchers to design multi-topic questionnaires, covering threat awareness, protective measures, and communication channels.
  2. Data Collection: Commissioned professional survey agencies to conduct stratified random sampling based on Germany's demographic characteristics.
  3. Data Analysis: Utilized Python toolkits for descriptive and statistical analysis, focusing on moderate and strong correlations with demographic and temporal factors.

Research Findings

• Specific Findings:

  1. Most German citizens have a high awareness of cyber threats, but only 39% are confident in their ability to protect themselves, and 62% lack confidence in detecting spyware activities.
  2. Only 8% believe Germany is adequately prepared for large-scale cyberattacks, reflecting a lack of trust in security agencies.
  3. Age is a significant factor influencing behavior and awareness. Younger individuals are more inclined to use backups and encryption, while older individuals rely more on firewalls and antivirus software.
  4. The use of mobile phones, laptops, and smart home devices has steadily increased, particularly among younger demographics.

• Advantages Over Existing Solutions:
  This study provides the first comparative analysis based on three years of longitudinal data, revealing time trends and exploring correlations with demographic variables. Additionally, it clarifies actual preferences for communication channels, offering precise policy recommendations and directions for technological improvements.

• Experimental or Evaluation Results:

  1. Spam emails, malware, and ransomware are the most common types of threats.
  2. Mobile alert apps have become the public's preferred source of information, while traditional media such as television have significantly declined in priority.
  3. Users are more willing to adopt simple and enforced security measures, such as automatic updates and two-factor authentication.

• Limitations and Future Directions:
  Limitations include: the sample only covers German citizens, making it difficult to generalize findings to countries with different risk cultures; the survey format cannot fully eliminate self-reporting biases; responses to certain cyber threats (e.g., complex technical attacks) may be based on speculation.
  Future directions include:

  1. Conducting international comparative studies to explore cybersecurity behaviors across different risk cultures.
  2. Combining qualitative research (e.g., interviews) with surveys to further analyze the sources of citizens' trust in security agencies.
  3. Exploring smarter and more user-friendly security technology designs.

Through systematic analysis, the authors propose design and policy recommendations to enhance citizens' cyber awareness and protective measures, integrating both technical and social perspectives. These findings have significant implications for future cybersecurity education, information dissemination, and technology development.