EuroUSEC

📢 Thank you to everyone who attended #EuroUSEC2025 🥳 Your presence and engagement helped make this event a real success! We hope you left as inspired as we are to continue exploring the human and usability dimensions of security and privacy 🔐 @UniStrathclyde @uni_lu

👀For more details, check out our amazing programme: lnkd.in/e2hnXEU5 @UniStrathclyde @uni_lu

In a preregistered 2×2 online experiment (N=537), the study found that both content- and context-based cues improved decision-making. Communicating system certainty further helped users calibrate trust.

📢Another piece of work will be presented tomorrow at #EuroUSEC2025. “Between Privacy and Transparency: Communicating Credibility Assessments on Encrypted Platforms” by Huiyun Tang, Björn Rohles, Yuwei CHUAI, Gabriele Lenzini and Anastasia Sergeeva

👀For more details on our amazing programme: lnkd.in/e2hnXEU5 @UniStrathclyde @uni_lu

Are Passkeys the Key: Older adults preferred passkeys for usability but cited adoption concerns. Despite positive attitudes, they’d only use passkeys for important accounts due to hardware requirements and setup hassles. A missed opportunity given their poor password practices.

👀 Another exciting work will be presented at #EuroUSEC2025 “When Trust Overrides Caution: Investigating Spear Phishing in Personal Contexts Among Young and Older Adults” Rhian Lukins, Neeranjan Chitare, Nalin Arachchilage, Lynne Coventry, James Nicholson

This SoK paper reviews 90+ studies to assess how AI tools support SOC analyst CSA across decision-making modes, incident types, and CSA levels. It finds strong research emphasis on automation and perception, with major gaps in augmentation and collaborative exploration.

We hope everyone is as excited as we are for #EuroUSEC2025 later this week! We'll hear about amazing work like: "SoK: AI Support for Analyst Situation Awareness in Security Operation Centres" Navodika Karunasingha, Mohan Baruwal Chhetri, Surya Nepal, Cecile Paris, Salil Kanhere

👀For more details on our amazing programme: #programme" target="_blank" rel="nofollow noopener">eurousec2025.cis.strath.ac.uk/#programme @UniStrathclyde @uni_lu

The widespread activation of cognitive dissonance triggers rejection of cybersecurity advice that does not align with current practice. Understanding how and why can help us to alleviate such cognitive dissonance and thereby encourage adoption of secure behaviours.

📢 Another fantastic piece of work we'll hear all about at #EuroUSEC2025: "SOK: Cognitive Dissonance Theory in the Cybersecurity Domain" by: Karen Renaud, Paul van Schaik

This paper explore how employees experience cybersecurity in daily work. Through 20 interviews, they identified key points of contact and mapped them to the NIST-CSF. Their findings expose gaps highlighting the need for an Employee-Centric Framework of Cybersecurity.

👂We're excited to hear more about this study as part of our 'Organizational Cybersecurity Practices' Session at #EuroUSEC2025: "Towards an Employee-Centric Framework of Cybersecurity" by: Alexandra von Preuschen, Roman Henke, Manpreet Kaur, Julian Nickel, Monika Schuhmacher

@UniStrathclyde @uni_lu

This paper introduces the Incident Response Readiness Score (IRRS), a risk-weighted, scenario-based framework for organisations. IRRS provides structured simulations, maturity mapping, and comparative benchmarks to measure and strengthen cyber incident response capabilities.

📢 More exciting work to look forward to next week at #EuroUSEC2025 👀 "Measuring and Benchmarking Incident Response Readiness" Written by: Montii A. and Dr. Priyadarsi Nanda

This study provides empirical evidence to guide policy choices for IoT cybersecurity label programs. The authors find that the presence of IoT labels alleviates security and privacy concerns! They provide recommendations for future programs and discuss potential societal impacts.

📢Highlighting another fantastic paper to be presented at #EuroUSEC2025: "IoT labels’ impact on security and privacy concerns" Written by: @yschiangg, Pardis Emami-naeini, Camille Cobb