# SAWIT--Security Awareness Improvement Tool in the Workplace
## 3 The SAWIT Tool Experience  
In order to enhance cyber situational awareness [31] while performing work-related activities, an employee runs the SAWIT tool accessible from his/her web browser. The tool runs from within a Chrome web browser, from the so-called SAWIT toolbar (Figure 1). SAWIT button A in the upper right corner (Figure 1A) opens the SAWIT Knowledge Sharing dialog (Figure 2A), filling it with the URL as well as the title of the opened security awareness resource. The initialization process in this action covers the data about the user who performs the knowledge sharing, the knowledge resource itself as well as the web page to be bookmarked/tagged or annotated. If the current security resource has already been bookmarked by another employee, the _Also Tagged by_ part (Figure 2A) will show his/her name. By clicking on the user shown in this part, the SAWIT tool will show the current security resources of the specified user. Figure 1: SAWIT add-on toolbar. (**A**) Knowledge Sharing; (**B**) Security Resources; (**C**) Assessment  
Sharing cyber security resources in the SAWIT tool refers to describing them with metadata (Dublin Core, [[http://dublincore.org/documents/dcmi-terms/](http://dublincore.org/documents/dcmi-terms/)]([http://dublincore.org/documents/dcmi-terms/](http://dublincore.org/documents/dcmi-terms/)), Terms and the like), concepts from the cyber security ontology (semantic annotation) and tagging. There are three types of annotations that can be performed in the SAWIT tool:  
* Annotation by using the concepts of cyber security ontology [32]. By using the artificial intelligence techniques, specifically knowledge representation and inference methods [33], employees get the knowledge resources that are described with the concepts of cyber security domain (security resources). This process is automated, and it is performed by using the KIM semantic annotation platform [34]. The results are shown in the _Share part_ (Figure 2B). Semantic annotations given in that way offer two kinds of benefits regarding the current security resource: enhanced information retrieval and improved interoperability. * The SAWIT tool performs the process of describing a security resource with the Dublin Core Terms vocabulary. This service instantiates the metadata of the corresponding security resource and stores metadata elements in the Title, Author(s), Subject and Description (Figure 2A). * The third type of annotation is tagging. It is done manually, during the process of bookmarking a security resource (and also when updating it), by adding tags that additionally describe the security resource. User-defined tags stored in the repository are presented in the _Tags part_ (Figure 2C). Clicking button B on the SAWIT add-on in the browser (Figure 1), the employee opens the _SAWIT Security Resources_ dialog (Figure 3), which presents the current cyber security materials that can be used by employees in the preparation process for the final tests. At the beginning of using the SAWIT tool, there is the repository security resources given by the organization, which is the starting point for all employees to improve cyber security awareness [31]. By using the SAWIT tool, the repository is being enriched with knowledge assets allowing employees to browse it and view individual assets so as to perform a semantic search of the repository. The search functionality (Figure 3) in the SAWIT tool includes a semantic search and faceted search. Figure 2: SAWIT knowledge sharing dialog. (**A**) Dublin Core Terms (**B**) Security Domain Concepts (**C**) User-defined Tags. The semantic search functionality of the SAWIT tool enables the effective and easy retrieval of stored cyber security assets through an understanding of the employee's profile and the contextual meaning of the search terms. It allows the user to search for specific cyber security resources based on a given input, such as selected domain concepts or tags. The semantic search finds all the related cyber security resources for the given input.