## 2 Related Work
### Cybersecurity Awareness for Home Users  
In the present paper, we differentiate home users from smart-home users. We consider home users as conventional internet users who use internet services through terminals (e.g., desktops, laptops, smartphones, and tablets) in the home. Smart-home users, on the other hand, are new-generation users who, in addition to internet services, use and remotely control IoT devices (e.g., smart thermostats, smart speakers) through terminals and voice commands to improve their comfort and quality of life at home. The issue of home users' awareness of cybersecurity best practices is not new in itself. The first research dates back to the early 2000s with the accessibility of the internet and computers in the home. In 2007, [PERSON], [PERSON], and [PERSON] [3] investigated the security perceptions of internet users in the home using a survey of 415 home users. They found that home users, especially novice internet users, lacked deep knowledge regarding how to protect themselves and were not aware of initiatives that might help them. In 2008, [PERSON], [PERSON], and [PERSON] [4] confirmed this finding in an additional investigation based on detailed interviews with 20 novice internet users. Moreover, the study revealed that safeguards should automatically be provided for home users. To this end, in 2010, [PERSON] and [PERSON] [18] proposed a theoretical e-awareness model that forces home users to absorb the required awareness content before venturing out into cyberspace in order to empower them with a better understanding of security risks and how to avoid threats. In 2012, [PERSON] et al. [19] analyzed the psychology of security for home users. They reported that when home users do not understand the various security threats, they are sometimes unwilling or unable to incur the costs of defending against threats. An effective way to raise home user awareness of threats is to engage them in cybersecurity awareness training. In 2017, [PERSON], [PERSON], and [PERSON] [20] reviewed the existing security awareness tools for home users in terms of their timeliness, mechanisms, and effectiveness. They reported a need to implement a holistic information security management system that is easy to understand and not time-consuming in order to raise information security awareness among home users. In 2019, [PERSON] and [PERSON] [7] studied the challenges of implementing training and awareness programs targeting cybersecurity social engineering. They reported that the economic aspect of cybersecurity training was another challenge to consider. This finding corroborated the conclusions of [PERSON], [PERSON], and [PERSON] [21], who surveyed 233 parents and reported that many did not want to spend money on cybersecurity education even though they were concerned about their children's safety and security from cyberattacks. In 2021, [PERSON] and [PERSON] [5] examined the level of knowledge and literacy held by 514 parents of primary school students. They reported that the majority of parents tended to overestimate their digital literacy level and had low cybersecurity skills. In addition, [PERSON], [PERSON], and [PERSON] [8] showed in 2021 that older adults, i.e., senior citizens, believed that the costs of cybersecurity training outweigh the benefits and did not want to engage in cybersecurity education. The literature reveals that the cybersecurity literacy of children, adults, and senior citizens appears to be low. Despite this, home users are not willing to spend money on cybersecurity education. Considering that smart-home users are even more at risk of cyberattacks because of security flaws in IoT devices, [PERSON] et al. [17] analyzed the costs and benefits of cybersecurity awareness training for smart-home users. The authors used game theory to model the strategy choices of four agents: a child, an adult, and a senior citizen, each living in a smart home, and an attacker.