Using Cartoons to Teach Internet Security
Sukamol Srikwan, Markus Jakobsson · Cryptologia · 2008
While good user education can hardly secure a system, we believe that poor user education can put it at serious risk. The current problem of online fraud is exasperated by the fact that most users make security decisions, such as whether to install a given piece of software or not, based on a very rudimentary understanding of risk. We describe the design principles behind SecurityCartoon.com, the first cartoon-based approach aimed at improving the understanding of risk among typical Internet users. We argue why an approach like ours is likely to produce better long-term effects than currently practiced educational efforts with the same general goals. This belief is based on the apparent difference between our approach and currently used alternatives. At the heart of these differences are the four guiding principles of our approach: (1 Abagnale , Frank W. 2007 . Stealing Your Life: The Ultimate Identity Theft Prevention Plan . New York : Broadway Books . [Google Scholar]) A research driven content selection, according to which we select educational messages based on user studies; (2 Alexander , Max. 2006 . Your Medical Records Stolen! How to protect yourself . Reader's Digest , November, Savvy Consumer section . [Google Scholar]) accessibility of the material, to reach and maintain a large readership; (3 Anandpara , Vivek , Andrew Dingman , Markus Jakobsson , Debin Liu , and Heather Roinestad . 2007 . Phishing IQ Tests Measure Fear, Not Ability. Paper presented at Usable Security workshop (USEC'07) February 15–16 , Scarborough , Trinidad/Tobago . [Google Scholar]) user immersion in the material, based on repetitions on a theme; and (4 Anti-Phishing Working Group. Consumer Advice: How to Avoid Phishing Scams . http://www.antiphishing.org/consumer_recs.html (accessed July 2, 2007). [Google Scholar]) adaptability to a changing threat.