Cyber security experts have acknowledged the need to focus more attention on the attitudes, beliefs and practices of end-users. Unfortunately, rather than fostering social research on users, this realisation has more often led to blaming users for security problems and sponsorship of fear-based campaigns directed at end-users. This scholarly essay argues for a shift in research to center on fostering a ‘security mindset’. Instead of just identifying safe practices, this would help build a mindset that embeds cyber security considerations into the everyday choices of users. This paper seeks to explain the concept of a security ‘mindset’ and its social significance, and suggest ways to move research forward.

中文翻译：

---

培育网络安全观念

网络安全专家已经意识到有必要将更多注意力集中在最终用户的态度，信念和做法上。不幸的是，这种认识并没有促进对用户的社会研究，而是更多地导致将安全问题归咎于用户，并赞助针对最终用户的基于恐惧的活动。这篇学术论文主张将研究转向以培养“安全思维方式”为中心。这不仅可以确定安全做法，还可以帮助建立一种将网络安全考虑因素纳入用户日常选择的思维方式。本文试图解释安全性“观念”的概念及其社会意义，并提出推进研究的方法。