A close look at a systematic method for analyzing sets of security advice

We carry out a detailed analysis of the security advice coding method (SAcoding) of Barrera et al., which is designed to analyze security advice in the sense of measuring actionability and categorizing advice items as practices, policies, principles, or outcomes. The main part of our analysis explor...

Full description

Saved in:
Bibliographic Details
Published in:Journal of cybersecurity (Oxford) Vol. 9; no. 1
Main Authors: Barrera, David, Bellman, Christopher, van Oorschot, Paul C
Format: Journal Article
Language:English
Published: Oxford Oxford University Press 2023
Subjects:
Agreements
Codes
Coding
Computer science
Cybersecurity
Datasets
Internet of Things
Qualitative analysis
IoT security
security advice
qualitative data coding
systematic analysis
ISSN:2057-2085, 2057-2093
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:We carry out a detailed analysis of the security advice coding method (SAcoding) of Barrera et al., which is designed to analyze security advice in the sense of measuring actionability and categorizing advice items as practices, policies, principles, or outcomes. The main part of our analysis explores the extent to which a second coder’s assignment of codes to advice items agrees with that of a first, for a dataset of 1013 security advice items nominally addressing Internet of Things devices. More broadly, we seek a deeper understanding of the soundness and utility of the SAcoding method, and the degree to which it meets the design goal of reducing subjectivity in assigning codes to security advice items. Our analysis results in suggestions for modifications to the coding tree methodology, and some recommendations. We believe the coding tree approach may be of interest for analysis of qualitative data beyond security advice datasets alone.
Bibliography:ObjectType-Article-1
SourceType-Scholarly Journals-1
ObjectType-Feature-2
content type line 14
ISSN:2057-2085
2057-2093
DOI:10.1093/cybsec/tyad013