Human-centered Cybersecurity and Privacy 10 credits

The course starts with an overview of cybersecurity from a socio-technical perspective and outlines essential concepts, definitions and standards in the area. This is followed by an introduction to models that describe human behaviour in cybersecurity (such as compliance theory, deterrence theory and protection motivation theory) and how we can help people raise their cybersecurity awareness. In the project, students will work in groups to create a comprehensive campaign aimed at raising awareness about cybersecurity issues. The campaign targets the education of a specific audience on best practices, risks, and solutions related to a topic in cybersecurity (e.g., phishing, password management, and data protection). The project helps students develop skills in research, communication, and practical security measures. Students collaborate to create an awareness-raising activity for the selected topic using a method of their choice. The assignment involves research, planning, execution, and evaluation, enabling students to apply both creative and practical skills while addressing a multi-faceted problem that has social and cultural dimensions. After presenting the campaign to peers and receiving feedback, the students revise their campaign and submit a final report, including a reflection on their individual contributions and lessons learned. The course includes the following elements: - Overview of the cybersecurity area: Focus on definitions, concepts, and terminology - Cybersecurity in a socio-technical context - Overview of models that describe cybersecurity behaviour - Overview of activities that can raise cybersecurity awareness - A project exploring the design of cybersecurity awareness-raising activity