Explanatory and predictive modeling of cybersecurity behaviors using protection motivation theory

Kiran, Uzma and Khan, Naurin Farooq and Murtaza, Hajra and Farooq, Ali and Pirkkalainen, Henri (2025) Explanatory and predictive modeling of cybersecurity behaviors using protection motivation theory. Computers and Security, 149. 104204. ISSN 0167-4048 (https://doi.org/10.1016/j.cose.2024.104204)

[thumbnail of Kiran-etal-CS-2024-sExplanatory-and-predictive-modeling-of-cybersecurity]
Preview
 Text. Filename: Kiran-etal-CS-2024-sExplanatory-and-predictive-modeling-of-cybersecurity.pdf
Final Published Version
License: Creative Commons Attribution 4.0 logo
Download (5MB)| Preview

Abstract

Context: Protection motivation theory (PMT) is the most frequently used theory in understanding cyber security behaviors. However, most studies have used a cross-sectional design with symmetrical analysis techniques such as structure equation modeling (SEM) and regression. A data-driven approach, such as predictive modeling, is lacking and can potentially evaluate and validate the predictive power of PMT for cybersecurity behaviors. Objective: The objective of this study is to assess the explanatory and predictive power of PMT for cyber security behaviors related to computers and smartphone. Method: An online survey was employed to collect data from 1027 participants. The relationship of security behaviors with threat appraisal (severity and vulnerability) and coping appraisal (response efficacy, self-efficacy and response cost) components were tested via explanatory and predictive modeling. Explanatory modelling was employed via SEM, whereas three machine learning algorithms, namely Decision Tree (DT), Support Vector Machine (SVM), and K Nearest Neighbor (KNN) were used for predictive modeling. Wrapper feature selection was employed to understand the most important factors of PMT in predictive modeling. Results: The results revealed that the threat severity from the threat appraisal component of PMT significantly influenced computer security and smartphone security behaviors. From the coping appraisal, response efficacy and self-efficacy significantly influenced computer and smartphone security behaviors. The ML analysis showed that the highest predictive power of PMT for computer security was 76% and for smartphone security 68% by KNN algorithm. The wrapper feature selection approach revealed that the most important features in predicting security behaviours are self-efficacy, response efficacy and intention to secure devices. Thus, the findings indicate the complementarity of the cross-sectional and data driven methods.

ORCID iDs

Kiran, Uzma, Khan, Naurin Farooq, Murtaza, Hajra, Farooq, Ali ORCID logoORCID: https://orcid.org/0000-0003-4864-3155 and Pirkkalainen, Henri;
  • Item type:Article
    ID code:91146
    Dates:
    Date
    Event
    28 February 2025
    Published
    13 November 2024
    Published Online
    7 November 2024
    Accepted
    Subjects:
    Department:Faculty of Science > Computer and Information Sciences
    Depositing user: Pure Administrator
    Date deposited:12 Nov 2024 16:36
    Last modified:20 Nov 2024 09:17
    URI:https://strathprints.strath.ac.uk/id/eprint/91146
CORE (COnnecting REpositories)