Behavioral Security

User cybersecurity behaviour is a concern for organisations as well as home users. This is because cyber-criminals have made a shift from targeting security systems to targeting the users of the systems. Because it is much easier to find a vulnerability through human failure than through the failure of digital systems.

Psychological traits and individual differences among users can create vulnerabilities to cyber security attacks and crimes. System users possess different cognitive capabilities which determine their ability to counter information security threat.

Cyber attackers can also manipulate the minds of computer system users, rather than a computer system itself, by, for example, using social engineering (e.g., tricking of computer system users to gain information, such as passwords) and cognitive hacking (e.g., spreading of misinformation) to break into a network or computer system

Social engineering attacks account for 28% of total cyber security attacks and 24% of these attacks occurred due to phishing. According to CyberEdge Reports, more than 70% of social engineering attacks have been successful in the last few years. 

Besides the threat of cyber attack due to user behavior, there is another threat that just as dangerous, which is cyber surveillance. Due to repetitive behavior, bad habit, typing, failure to use VPN, failure to access certain services anonymously, not read terms of services, accept terms and services that collect data etc, it is possible to track a user and collect personal data about it. 

A user tracked with all their data collected and stored in government servers or companies and international organizations, becomes a victim of digital tyranny, because all this collected data can be used against him, either in the form of blackmail or as a way to incriminate the user. Also, these collected dates are kept forever, so you never know how they will use them against you.