# Getting Rid of the Usability/Security Trade-Off: A Behavioral Approach
## 2 Cybersecurity  
Cybersecurity is the \"protection of confidentiality, integrity, and availability of information in cyberspace\" [7]. Specifically, it represents that part of information security that focuses mainly on protecting digital information against any threats that may arise from using the internet [8]. To understand more clearly what is meant by cybersecurity, it is appropriate to analyze the two terms \"cyber\" and \"security\". On one hand, \"cyber\" is a prefix that connotes cyberspace and refers to \"a complex environment resulting from the interaction of people, software, internet, supported by physical information and communication technologies\" [7]. On the other hand, concerning the term \"security\", a specific one has not been suggested in the literature [9], but it generally refers to something free of dangers or threats [10]. The attention given to cybersecurity is continuously expanding [11], especially due to the spread of the internet [8]. The attention paid to cybersecurity has also increased due to the global COVID-19 pandemic [12]. Organizations and companies have had to implement work from home (WFH) practices, leading workers to use devices (sometimes even personal devices) and connections lacking the standard security measures provided by companies, which has led to an increase in cyber-attacks and risks to corporate data [13]. A cyber-attack consists of any action taken to undermine the operation of a computer network to compromise political and national security [14]. It is, therefore, a disruption of normal computer operation and loss of information through a series of malicious events [15]. Cyber-attacks are implemented to spread misinformation, block certain services, access sensitive information, conduct espionage, steal data, and cause financial losses. As the last decade has seen an evolution of social media, this has led to the creation of the so-called \"social cyber-attack\", which can be of two different types: \"(1) pre-meditated, which are designed to create an excited signal in a social network, often under false pretenses, so as to benefit from the chaos and upheaval; and (2) opportunistic, which take advantage of an existing excited social network signal and, by manipulating it through various means, derive benefit\" [16] (p. 5). The complexity and severity of cyber-attacks has increased over the years. There are still some gaps concerning the different types of attacks, which make some countries or some organizations particularly vulnerable [17]. Since the beginning of the global COVID-19 pandemic, in addition to the primary threat to the health of individuals around the world, there has been a dramatic increase in cyber-attacks as e-commerce increases [18]. Such attacks have generated harmful consequences for society. Data show that as in March 2020, there was a 600% increase in phishing emails (fraudulent messages created to appear authentic, requiring you to provide sensitive personal information) [19] and that, in April 2020, nearly 18 million malware and phishing emails were blocked every day [20]. The 2021 annual report on cyber threats published by the European Union Agency for Cybersecurity [21] identified the following as prime threats:  
* Malware: more commonly known as \"computer virus\" malware (short for malicious software), means any computer program used to disrupt the operations performed by the user of a computer. * Ransomware: a type of malware that restricts access to the device it infects, demanding a ransom to remove the restriction. For example, some forms of ransomware lock the system and require the user to pay to unlock the system, while others encrypt the user's files and require payment to return the encrypted files to plaintext. * Crypto-jacking: a computer crime that involves the unauthorized use of users' devices (computers, tablets, servers, smartphones) to produce cryptocurrency. Like many forms of cybercrime, the main reason behind them is profit. Unlike other threats, it is designed to remain completely hidden from the victim.