Training and Embedding Cybersecurity Guardians in Older Communities

Title of the Paper

Training and Embedding Cybersecurity Guardians in Older Communities

Bibliographic Information

• Subject Area: Information Security and Online Safety Education for Older Communities
• Keywords: Older Adults, Civic Engagement, Community, Cybersecurity, Information Sharing, Social Sustainability, Digital Health, Behavior Change, Peer Support, Civic Education

Research Background and Problem Statement

• Identified Problems or Challenges:

  • Older adults are often targeted by cyberattacks due to their lack of cybersecurity knowledge, such as pension fraud and romance scams.
  • Older adults tend to acquire cybersecurity information from people around them rather than actively seeking advice from authoritative experts.
  • Most older adults have limited understanding of technical topics, and existing training or learning tools are difficult to widely implement and lack ecological validation.

• Significance:

  • With the increasing prevalence of digitalization, older adults have a growing need for internet use, yet their sense of security significantly affects their participation in online activities.
  • Cyber fraud causes substantial economic and psychological harm to older adults, potentially impacting their overall physical and mental health.
  • Raising cybersecurity awareness is crucial to reducing the success rate of cyberattacks.

• Research Motivation and Related Work:

  • Promoting cybersecurity knowledge acquisition among older adults while addressing the shortcomings of traditional training through community-based approaches.
  • Focusing on peer-to-peer information dissemination and adopting informal communication methods to facilitate knowledge diffusion and enhance social engagement among older adults.

Solution

• Method or Solution:

  • A community-oriented cybersecurity education program called "CyberGuardians" was proposed, training older adults to become community cybersecurity advocates who share best practices.
  • This embedded peer information dissemination strategy aims to reach individuals who typically do not actively seek cybersecurity information.

• Innovative Aspects:

  • Utilizing a peer learning model based on real-world communities rather than the traditional expert-to-citizen unidirectional dissemination model.
  • Conducting the first long-term real-world validation of cybersecurity training for older adults through natural community embedding and interaction.
  • Emphasizing simple yet effective cybersecurity behaviors to enhance practicality and acceptance.

• Implementation Steps and Key Techniques:

  1. Recruitment and Training:
     • Fourteen volunteers aged 55-80 were recruited, including individuals with diverse professional backgrounds and varying levels of technical knowledge.
     • A training manual was developed based on published academic research and official recommendations, covering topics such as password management, scam identification, and protective software.
  2. Training and Support:
     • Interactive workshops, hands-on activities, and real-world case studies were used to reinforce participants' understanding of key cybersecurity knowledge.
     • Support groups and resources (e.g., video recordings, manuals) were provided to boost participants' confidence.
  3. Community Embedding and Information Dissemination:
     • Participants were encouraged to share security information through informal conversations (e.g., family gatherings, community events) and via social media platforms.
  4. Guidance and Feedback:
     • The project team collected data through questionnaires and interviews, continuously monitoring participants' implementation outcomes and providing adjustment recommendations.

Research Outcomes

• Specific Outcomes:

  • Over nine months, the 14 CyberGuardians actively shared information with approximately 470 citizens, further expanding coverage through word-of-mouth dissemination among community members.
  • Citizens' awareness of best cybersecurity practices significantly improved, with 44% changing at least one password and 73% expressing willingness to improve their behaviors.
  • CyberGuardians demonstrated significant growth in their self-confidence and skills in cybersecurity, with their baseline confidence in "protecting themselves" increasing from 35.7% to 100%.

• Advantages Over Existing Solutions:

  • Directly addressing high-risk groups (older adults) often overlooked, effectively resolving key bottlenecks such as ecological validity and interpersonal trust.
  • Informal and emotionally engaging sharing methods proved highly effective in fostering security awareness and behavioral change.
  • Community embedding not only enhanced overall security awareness but also strengthened older citizens' sense of social roles and psychological well-being.

• Experimental or Evaluation Results:

  • Most CyberCitizens reported heightened awareness of online risks, such as scrutinizing suspicious email addresses and content.
  • Qualitative interviews revealed that respondents generally found the community-oriented training approach engaging and practical.
  • CyberGuardians employed various methods to disseminate information, including workshops, social media, emails, and informal conversations.

• Limitations and Future Directions:

  • Limitations in data collection: Reliance on participant feedback may introduce positive bias.
  • Integrity of information dissemination: Original recommendations may be altered or misunderstood during transmission.
  • Social network differences due to candidates' geographic locations may impact the project's long-term performance.
  • Future Directions:
    • Exploring technological methods to facilitate remote CyberGuardians network support.
    • Expanding to other technical or non-technical topics (e.g., mental health, privacy protection).
    • Investigating the cultivation of long-term cybersecurity habits and behavioral persistence.