Volume 16 (2025) Download Cover Page

Bridging the Gap: How Knowledge, Attitudes, and Practices Shape Cybersecurity Awareness in Thai Education

Article Number: e2025236  |  Available Online: May 2025  |  DOI: 10.22521/edupij.2025.16.236

Khanittha Sittitiamjan , Pongpisit Wuttidittachotti

Abstract

Background/purpose. This study investigates how knowledge, attitudes, and practices (KAP) influence cybersecurity awareness (CSA) among students in Thai educational institutions. The research addresses regional disparities in cybersecurity readiness by incorporating a culturally responsive adaptation of the KAP model.

Materials/methods. A mixed-methods approach was employed, collecting data from 230 students across Thai universities using stratified sampling. The study utilized t-tests, ANOVA, and regression analyses to evaluate CSA across demographic factors and digital domains.

Results. Findings showed clear gender and age differences in CSA. Male students consistently outperformed their female counterparts in network security, malware detection, and encryption literacy. Younger students exhibited greater technical vigilance, whereas older students showed stronger practical habits. The KAP framework was a robust predictor of cybersecurity awareness, highlighting individual behavior patterns and systemic gaps in cybersecurity education.

Conclusion. This research contributes a localized CSA model grounded in the KAP framework, offering three main contributions: (1) tailored recommendations for integrating gender- and age-specific training in cybersecurity curricula, (2) identification of cultural and contextual misalignments between global cybersecurity frameworks and Thai educational needs, and (3) practical strategies for mitigating awareness gaps through inclusive, skill-based interventions.

Keywords: Cybersecurity awareness, digital skills, Internet behavior, KAP Framework, Thailand

References

Abomhara, M., Nweke, L. O., Yayilgan, S. Y., Comparin, D., Teyras, K., & de Labriolle, S. (2024).  Enhancing privacy protections in national identification systems: an examination of stakeholders' knowledge, attitudes, and privacy practices by design. International Journal of Information Security, 23, 3665–3689. https://doi.org/10.1007/s10207-024-00905-0

Alhadidi, I., Nweiran, A., & Hilal, G. (2024). The influence of cybercrime and legal awareness on the behavior of University of Jordan students. Heliyon, 10(12), e32371. https://doi.org/10.1016/j.heliyon.2024.e32371

Ainslie, S., Thompson, D., Maynard, S., & Ahmad, A. (2023). Cyber-threat intelligence for security decision-making: A review and research agenda for practice. Computers & security, 132, 103352. https://doi.org/10.1016/j.cose.2023.103352 Anwar, M., He, W., Ash, I., Yuan, X., Li, L., & Xu, L. (2017). Gender difference and employees' cybersecurity behaviors. Computers in Human Behavior69, 437–443. https://doi.org/10.1016/j.chb.2016.12.040

Aslan, Ö., Aktuğ, S. S., Ozkan-Okay, M., Yilmaz, A. A., & Akin, E. (2023). A comprehensive review of cyber security vulnerabilities, threats, attacks, and solutions. Electronics, 12(6), 1333. https://doi.org/10.3390/electronics12061333

Azad, R. U., Tasmim, S., & Atikuzzaman, M. (2025). Investigating students’ awareness of online privacy and cybersecurity: an empirical study with effective cybersecurity training framework. Global Knowledge, Memory, and Communication. Vol. ahead-of-print No. ahead-of-print. https://doi.org/10.1108/GKMC-05-2024-0319

Branley-Bell, D., Coventry, L., Dixon, M., Joinson, A., & Briggs, P. (2022). Exploring age and gender differences in ICT cybersecurity behaviour. Human Behavior and Emerging Technologies2022(1), 2693080. https://doi.org/10.1155/2022/2693080

Bruce, M., Lusthaus, J., Kashyap, R., Phair, N., & Varese, F. (2024). Mapping the global geography of cybercrime with the World Cybercrime Index. PLOS ONE, 19(4), e0297312.  https://doi.org/10.1371/journal.pone.0297312

Cain, A. A., Edwards, M. E., & Nevertheless, J. D. (2018). An exploratory study of cyber hygiene behaviors and knowledge. Journal of Information Security and Applications, 42, 36–45. https://doi.org/10.1016/j.jisa.2018.08.002

Chan, C. K. Y., & Lee, K. K. W. (2023). The AI generation gap: Are Gen Z students more interested in adopting generative AI, such as ChatGPT, in teaching and learning than their Gen X and millennial generation teachers? Smart Learning Environments, 10(1), 60. https://doi.org/10.1186/s40561-023-00269-3

Chaudhary, S. (2024). Driving behavior change with cybersecurity awareness. Computers & security, 142, 103858. https://doi.org/10.1016/j.cose.2024.103858

Chauhan, R., Mehtar, K., Kaur, H., & Alankar, B. (2024, April). Evaluating cyber-crime using machine learning and AI approach for environmental sustainability. In P. Whig, N. Silva, A. A. Elngar, N. Aneja, & P. Sharma (Eds.), Sustainable development through machine learning, AI and IoT: ICSD 2024 (Vol. 2196). Communications in Computer and Information Science. Springer. https://doi.org/10.1007/978-3-031-71729-1_4

Chen, Y., Cui, M., Wang, D., Cao, Y., Yang, P., Jiang, B., Lu, Z., & Liu, B. (2024). A survey of large language models for cyber threat detection. Computers & Security, 145, 104016. https://doi.org/10.1016/j.cose.2024.104016

Cook, S. (2024, May 14). U.S. schools leaked 37.6 million records in 3,713 data breaches. Comparitech. https://www.comparitech.com/blog/vpn-privacy/us-schools-data-breaches/

Essien, E. S., & Egbeji, E. E. (2024). Digitalizing Cyber Security for Data Management in Higher Education Implication for Educational Management in Nigeria. Journal of Advanced Education Philosophy, 8(4), 234- 238. https://doi.org/10.36348/jaep.2024.v08i04.001

Etikan, I., Musa, S. A., & Alkassim, R. S. (2016). Comparison of convenience sampling and purposive sampling. American Journal of Theoretical and Applied Statistics, 5(1), 1-4. https://doi.org/10.11648/j.ajtas.20160501.11

Fadli, R., Surjono, H. D., Sari, R. C., Hidayah, Y., & Eliza, F. (2024). Assessing cybersecurity awareness among vocational students in office administration. International Journal of Safety and Security Engineering, 14(4), 1115–1123. https://doi.org/10.18280/ijsse.140410

Gratian, M., Bandi, S., Cukier, M., Dykstra, J., & Ginther, A. (2018). Correlating human traits and cyber security behavior intentions. Computers & Security, 73, 345–358. https://doi.org/10.1016/j.cose.2017.11.015

He, S. Q., & Chen, I. H. (2024). Internet addiction among teachers: A systematic review. Environment and Social Psychology9(6), 2513. https://doi.org/10.54517/esp.v9i6.2513

Ifeanyi, T. T., Nwaosu, O. P., & Ezeanokwasa, F. N. (2024). Digital knowledge and market positioning of micro, small, and medium-scale enterprises (MSMES) in Asaba, Delta State, Nigeria. Journal of Global Accounting, 10(4), 85-106. https://journals.unizik.edu.ng/joga/article/view/5177

Iskandar, I., Putra, D. D., Yasin, A. I., & Khairan, K. (2025). Cyber Smart Campus: Cakap Digital & Aman Siber. PT. Sonpedia Publishing Indonesia.

Kabaila, P., Farchione, D., Alhelli, S., & Bragg, N. (2021). The effect of a Durbin–Watson pretest on confidence intervals in regression. Statistica Neerlandica75(1), 4-23. https://doi.org/10.1111/stan.12222

Khader, M., Karam, M., & Fares, H. (2021). Cybersecurity awareness framework for academia. Information12(10), 417. https://doi.org/10.3390/info12100417

Lee, S. S. (2024). Predicting the Effects of CyberPatriot Participation, Internet Experience, Gender, and Grade Level on Cybersecurity Judgment (Intuitive and Rational) Among Middle and High School Students: A Quantitative Predictive Correlational Study. (Doctoral dissertation- Liberty University). Virgina. https://digitalcommons.liberty.edu/doctoral/6363

Leekitchwatana, P., Pimdee, P., & Moto, S. (2018). Using the Internet for development of structural equation model of teaching behavior of junior high school teachers. Kasetsart Journal of Social Sciences39(3), 868-878. https://so04.tci-thaijo.org/index.php/kjss/article/view/242614

Liluashvili, G. B. (2021). Cyber risk mitigation in higher education. Law & World17, 15.

Luo, Y. F., Chen, L. C., Yang, S. C., & Hong, S. (2022). Knowledge, attitude, and practice (KAP) toward COVID-19 pandemic among the public in Taiwan: a cross-sectional study. International Journal of environmental research and public health19(5), 2784. https://doi.org/10.3390/ijerph19052784

Ma, K., & Fang, B. (2024). Exploring Generation Z’s expectations at future work: the impact of digital technology on job searching. European Journal of Training and Development, 48(9), 933-953. https://doi.org/10.1108/EJTD-05-2023-0076

Marín, V. I., Carpenter, J. P., Tur, G., & Williamson-Leadley, S. (2023). Social media and data privacy in education: An international comparative study of perceptions among pre-service teachers. Journal of Computers in Education, 10(4), 769–795. https://doi.org/10.1007/s40692-022-00243-x

Muniandy, L., Muniandy, B., & Samsudin, Z. (2017). Cyber security behaviour among higher education students in Malaysia. Journal of Information Assurance & Cybersecurity800299. https://doi.org/10.5171/2017.800299

NIST Cybersecurity Framework (CSF) 2.0. (2024, February 26). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.CSWP.29

Nkata, A. S. (2025). Impact of Teaching Cybersecurity Professional Courses for Students of Higher Learning Institutions: What Should the Society Expect? BIMA Journal of Science and Technology, 8(4B), 140-149. https://doi.org/10.56892/bima.v8i4B.1191

O'Brien, R. M. (2007). A Caution Regarding Rules of Thumb for Variance Inflation Factors. Quality & Quantity, 41(5), 673–690. https://doi.org/10.1007/s11135-006-9018-6

Oroni, C. Z., Xianping, F., Ndunguru, D. D., & Ani, A. (2025). Cyber safety in e-learning: The effects of cyber awareness and information security policies with moderating effects of gender and experience levels among e-learning students. Education and Information Technologies, 1-40. https://doi.org/10.1007/s10639-025-13366-2

Papasteri, C., Letzner, R. D., & Pascal, S. (2024). Pandemic KAP framework for behavioral responses: initial development from lockdown data. Current Psychology43(26), 22767-22779. https://doi.org/10.1007/s12144-024-05670-w

Parmar, M., & Miles, A. (2024, May). Cyber Security Frameworks (CSFs): An assessment between the NIST CSF v2. 0 and EU Standards. In 2024 Security for Space Systems (3S) (pp. 1-7). IEEE. https://doi.org/10.23919/3S60530.2024.10592293

Phuong, C. (2022). Teaching cybersecurity: A project-based learning and guided inquiry collaborative learning approach (Doctoral dissertation, University of Tennessee at Chattanooga). University of Tennessee at Chattanooga. https://scholar.utc.edu/theses/757

Pimdee, P., & Leekitchwatana, P. (2019). Structural equation modeling of teaching behavior in Internet use of teachers in Thailand. TEM Journal8(4), 1499-1507. http://dx.doi.org/10.18421/TEM84-56

Pimdee, P., & Leekitchwatana, P. (2022). Appropriate Internet Use Behavior (AIUB) of Thai preservice teachers: A Hierarchical Linear Model (HLM) analysis. International Journal of Instruction, 15(1), 489-508. https://doi.org/10.29333/iji.2022.15128a

Pollini, A., Callari, T. C., Tedeschi, A., Ruscio, D., Save, L., Chiarugi, F., & Guerri, D. (2022). Leveraging human factors in cybersecurity: An integrated methodological approach. Cognition, Technology & Work, 24(2), 371–390. https://doi.org/10.1007/s10111-021-00683-y

Rohan, R., Pal, D., Hautamäki, J., Funilkul, S., Chutimaskul, W., & Thapliyal, H. (2023). A systematic literature review of cybersecurity scales assessing information security awareness. Heliyon, 9(3), e14234. https://doi.org/10.1016/j.heliyon.2023.e14234

Shah, M. U., Iqbal, F., Rehman, U., & Hung, P. C. K. (2023). A comparative assessment of human factors in cybersecurity: Implications for cyber governance. IEEE Access, 11, 87970–87984. https://doi.org/10.1109/ACCESS.2023.3296580

Shari, A. M. J., Ahmad, M., Razali, R. R. R., & Sujak, A. F. A. (2022, December). Knowledge, attitude, and practices towards internet safety and security among generation Z in Malaysia: A conceptual paper. In Proceedings of the International Conference on Communication, Language, Education, and Social Sciences. CLESS (pp. 4-11). https://doi.org/10.1016/j.heliyon.2024.e32371

Slepian, R. C., Vincent, A. C., Patterson, H., & Furman, H. (2024). Social media, wearables, telemedicine and digital health—A Gen Y and Z perspective. In Reference Module in Biomedical Sciences. http://dx.doi.org/10.1016/B978-0-12-824010-6.00072-1

Taherdoost, H. (2024). A critical review of cybersecurity awareness frameworks and training models. Procedia Computer Science, 235, 1649–1663. https://doi.org/10.1016/j.procs.2024.04.156

Tan, S. (2022, October 10). Generational trends in Thailand’s social media use: How Gen Z differs from other age groups. YouGov. https://tinyurl.com/5n8yctvw

Triplett, W. J. (2023). Addressing cybersecurity challenges in education. International Journal of STEM Education for Sustainability3(1), 47-67.  https://www.journal.gmpionline.com/index.php/ijses/article/view/132

Rahman, M. M., Tabash, M. I., Salamzadeh, A., Abduli, S., & Rahaman, M. S. (2022). Sampling techniques (probability) for quantitative social science researchers: A conceptual guidelines with examples. Seeu Review, 17(1), 42-51. https://doi.org/10.2478/seeur-2022-0023

Uttley, J. (2019). Power analysis, sample size, and assessment of statistical assumptions—Improving the evidential value of lighting research. Leukos, 5(2-3). https://doi.org/10.1080/15502724.2018.1533851

Wang, C., Tang, H., Zhu, H., Zheng, J., & Jiang, C. (2024). Behavioral authentication for security and safety. Security and Safety, 3, 2024003. https://doi.org/10.1051/sands/2024003

Wannapiroon, N., & Pimdee, P. (2022). Thai undergraduate science, technology, engineering, arts, and math (STEAM), creative thinking and innovation skill development: a conceptual model using a digital virtual classroom learning environment. Education and Information Technologies, 27(4), 5689-5716. https://doi.org/10.1007/s10639-021-10849-w

Zhang, Y., Du, Y., & Liu, C. (2025). Enhancing Cybersecurity Awareness among University Students: A Strategic Approach. Learning & Education14(1). https://ojs.piscomed.com/index.php/L-E/article/view/4275

Zineddine, A., Chakir, O., Sadqi, Y., Maleh, Y., Gaba, G. S., Gurtov, A., & Dev, K. (2024). A systematic review of cybersecurity assessment methods for HTTPS. Computers and Electrical Engineering, 115, 109137. https://doi.org/10.1016/j.compeleceng.2024.109137