A Systematic Review of Security Communication Strategies: Guidelines and Open Challenges

Fuente: arXiv
Guardado en:
Detalles Bibliográficos
Autores principales: Carreira, Carolina, Mendes, Alexandra, Ferreira, João F., Christin, Nicolas
Formato: Preprint
Publicado: 2025
Materias:
Acceso en línea:
Etiquetas: Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
_version_ 1866909563271249920
author Carreira, Carolina
Mendes, Alexandra
Ferreira, João F.
Christin, Nicolas
author_facet Carreira, Carolina
Mendes, Alexandra
Ferreira, João F.
Christin, Nicolas
contents Cybersecurity incidents such as data breaches have become increasingly common, affecting millions of users and organizations worldwide. The complexity of cybersecurity threats challenges the effectiveness of existing security communication strategies. Through a systematic review of over 3,400 papers, we identify specific user difficulties including information overload, technical jargon comprehension, and balancing security awareness with comfort. Our findings reveal consistent communication paradoxes: users require technical details for credibility yet struggle with jargon and need risk awareness without experiencing anxiety. We propose seven evidence-based guidelines to improve security communication and identify critical research gaps including limited studies with older adults, children, and non-US populations, insufficient longitudinal research, and limited protocol sharing for reproducibility. Our guidelines emphasize user-centric communication adapted to cultural and demographic differences while ensuring security advice remains actionable. This work contributes to more effective security communication practices that enable users to recognize and respond to cybersecurity threats appropriately.
format Preprint
id arxiv_https___arxiv_org_abs_2504_02109
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle A Systematic Review of Security Communication Strategies: Guidelines and Open Challenges
Carreira, Carolina
Mendes, Alexandra
Ferreira, João F.
Christin, Nicolas
Cryptography and Security
Human-Computer Interaction
E.3; H.5
Cybersecurity incidents such as data breaches have become increasingly common, affecting millions of users and organizations worldwide. The complexity of cybersecurity threats challenges the effectiveness of existing security communication strategies. Through a systematic review of over 3,400 papers, we identify specific user difficulties including information overload, technical jargon comprehension, and balancing security awareness with comfort. Our findings reveal consistent communication paradoxes: users require technical details for credibility yet struggle with jargon and need risk awareness without experiencing anxiety. We propose seven evidence-based guidelines to improve security communication and identify critical research gaps including limited studies with older adults, children, and non-US populations, insufficient longitudinal research, and limited protocol sharing for reproducibility. Our guidelines emphasize user-centric communication adapted to cultural and demographic differences while ensuring security advice remains actionable. This work contributes to more effective security communication practices that enable users to recognize and respond to cybersecurity threats appropriately.
title A Systematic Review of Security Communication Strategies: Guidelines and Open Challenges
topic Cryptography and Security
Human-Computer Interaction
E.3; H.5
url https://arxiv.org/abs/2504.02109