Two Case Studies in Using Chatbots for Security Training
Stewart Kowalski1, Katarina Pavlovska1 , Mikael Goldstein3
1 SecLab Department of Computer and Systems Sciences Stockholm University/Royal Institute of Technology Stockholm, Sweden
2 migoli, Valhallavägen 130, 114 41 Stockholm, Sweden
Abstract. This paper discusses the result of two case studies performed in a large international company to test the use of chatbots for internal security training. The first study targeted 26 end users in the company while the second study examined 80 security specialists. From a quantitative analytical perspective there does not appears to be any significant findings when chatbots are used for security training. However there does appear to be qualitative data that suggest that the attitudes of the respondents appear to be more positive to security when chatbots are used than with the current traditional e-learning security training courses at the company.
Keywords:, Security Awareness Training, Chatbots,
1. Introduction
At the first WISE conference in 1999 Kowalski et al [1] presented in the paper The Manual is the Message observations that employees in a company that received security policy and instruction via a paper based medium differed in attitude to security to those that received the same security policy and instruction via an internal webpage. Those that received the information via a paper medium appeared to have a better security attitude than those that received the same information via a web based medium.
In this paper were discuss two new case studies [2, 3] were the medium of communication is the independent variable and the knowledge, attitude and behavior the dependent variable. The paper is divided into five sections. After this short introduction we discuss the current state of security awareness training in corporations. In section two we review the technology of chatbots and how this...