Ricerc@Sapienza

In all organisations, including Universities, tools and processes implemented for ensuring cybersecurity are often designed in a top-down, corporate-centred perspective (as opposed to being user-centred). Often, that drives the users to find workarounds allowing them to be effective despite (not because) the tools and the processes they are obliged to work with. It has been often reported that one of the main issues in cybersecurity is the inefficacy of complex tools, guidelines, best practices, and software applications that decrease system¿s usability and increase the user workload. However, the security/usability tradeoff cannot be avoided and this proposal is based on the general idea that the tradeoff itself can be exploited for devising design strategies aimed at improving security.
This project is aimed at creating a behavioural-based security system implementing a reward strategy (gamification) to test security behaviours in an academic environment. Participants will be required to perform mundane tasks (e.g. sending and receiving emails, navigating the Internet, or writing and sending documents) using the platform. Both laboratory and remote research activity will be carried out for reaching the project goals.