Investigating and comparing the predictors of the intention towards taking security measures against malware, scams and cybercrime in general. (March 2019)

• Record Type: Journal Article
• Authors: Martens, Marijn; De Wolf, Ralf; De Marez, Lieven
• Is Part Of: Computers in human behavior. Volume 92(2019)
• Page Start: 139
• Page End: 150
• Publication Date: 2019-03
• Subjects: Cybercrime -- Protection motivation theory -- Malware -- Scam -- Subjective norm -- Awareness; Interactive computer systems -- Periodicals; Man-machine systems -- Periodicals; 004.019
• DOI: 10.1016/j.chb.2018.11.002
• Languages: English
• ISSNs: 0747-5632

Abstract

Abstract: It is a popular belief that humans are the weakest link in cyber-security. However, there has been little research devoted to why people do (or do not) protect themselves and what explains their behaviors. Instead, more attention has been paid to victimization and prevalence of cybercrime. Therefore, we investigate and compare the motivations to protect oneself against scams, malware and cybercrime in general using an adjusted model of the protection motivation theory (PMT), which includes subjective norm, threat and coping awareness. To test this model, different structural equation models (SEM) were used and compared, with each focusing on a specific cybercrime. Our non-random (convenience) sample (n = 1181) is representative for age, residence and gender for the Belgian population. The results show the extended PMT model is a good predictive model to explain people's protection against cybercrime. The findings suggest significant differences when protecting oneself against 'technical' cybercrimes (malware), compared to more 'social' cybercrimes (scams). The differences are situated on the predictive role of coping, threat awareness and perceived vulnerability. Furthermore, we found subjective norm to be an important predictor in the intention toward protecting against all cybercrimes. Recommendations for further research and awareness campaigns are provided in the discussion. Highlights: Subjective norm (SN) strongly predicts the intention to take security measures. Malware's PMT model is significantly different from Scam's PMT-model. SN and the PMT model explain 28% of the intention to take security measures. SE only predicts intention toward security measures for experienced internet users.