Bridging the Gap: How Knowledge, Attitudes, and Practices Shape Cybersecurity Awareness in Thai Education
Article Number: e2025236 | Available Online: May 2025 | DOI: 10.22521/edupij.2025.16.236
Khanittha Sittitiamjan , Pongpisit Wuttidittachotti
Full text PDF |
6040 |
4836
Abstract
|
Background/purpose. This study investigates how knowledge, attitudes, and practices (KAP) influence cybersecurity awareness (CSA) among students in Thai educational institutions. The research addresses regional disparities in cybersecurity readiness by incorporating a culturally responsive adaptation of the KAP model. Materials/methods. A mixed-methods approach was employed, collecting data from 230 students across Thai universities using stratified sampling. The study utilized t-tests, ANOVA, and regression analyses to evaluate CSA across demographic factors and digital domains. Results. Findings showed clear gender and age differences in CSA. Male students consistently outperformed their female counterparts in network security, malware detection, and encryption literacy. Younger students exhibited greater technical vigilance, whereas older students showed stronger practical habits. The KAP framework was a robust predictor of cybersecurity awareness, highlighting individual behavior patterns and systemic gaps in cybersecurity education. |
Conclusion. This research contributes a localized CSA model grounded in the KAP framework, offering three main contributions: (1) tailored recommendations for integrating gender- and age-specific training in cybersecurity curricula, (2) identification of cultural and contextual misalignments between global cybersecurity frameworks and Thai educational needs, and (3) practical strategies for mitigating awareness gaps through inclusive, skill-based interventions.
Keywords: Cybersecurity awareness, digital skills, Internet behavior, KAP Framework, Thailand
ReferencesAbomhara, M., Nweke, L. O., Yayilgan, S. Y., Comparin, D., Teyras, K., & de Labriolle, S. (2024). Enhancing privacy protections in national identification systems: an examination of stakeholders' knowledge, attitudes, and privacy practices by design. International Journal of Information Security, 23, 3665–3689. https://doi.org/10.1007/s10207-024-00905-0
Alhadidi, I., Nweiran, A., & Hilal, G. (2024). The influence of cybercrime and legal awareness on the behavior of University of Jordan students. Heliyon, 10(12), e32371. https://doi.org/10.1016/j.heliyon.2024.e32371
Ainslie, S., Thompson, D., Maynard, S., & Ahmad, A. (2023). Cyber-threat intelligence for security decision-making: A review and research agenda for practice. Computers & security, 132, 103352. https://doi.org/10.1016/j.cose.2023.103352 Anwar, M., He, W., Ash, I., Yuan, X., Li, L., & Xu, L. (2017). Gender difference and employees' cybersecurity behaviors. Computers in Human Behavior, 69, 437–443. https://doi.org/10.1016/j.chb.2016.12.040
Aslan, Ö., Aktuğ, S. S., Ozkan-Okay, M., Yilmaz, A. A., & Akin, E. (2023). A comprehensive review of cyber security vulnerabilities, threats, attacks, and solutions. Electronics, 12(6), 1333. https://doi.org/10.3390/electronics12061333
Azad, R. U., Tasmim, S., & Atikuzzaman, M. (2025). Investigating students’ awareness of online privacy and cybersecurity: an empirical study with effective cybersecurity training framework. Global Knowledge, Memory, and Communication. Vol. ahead-of-print No. ahead-of-print. https://doi.org/10.1108/GKMC-05-2024-0319
Branley-Bell, D., Coventry, L., Dixon, M., Joinson, A., & Briggs, P. (2022). Exploring age and gender differences in ICT cybersecurity behaviour. Human Behavior and Emerging Technologies, 2022(1), 2693080. https://doi.org/10.1155/2022/2693080
Bruce, M., Lusthaus, J., Kashyap, R., Phair, N., & Varese, F. (2024). Mapping the global geography of cybercrime with the World Cybercrime Index. PLOS ONE, 19(4), e0297312. https://doi.org/10.1371/journal.pone.0297312
Cain, A. A., Edwards, M. E., & Nevertheless, J. D. (2018). An exploratory study of cyber hygiene behaviors and knowledge. Journal of Information Security and Applications, 42, 36–45. https://doi.org/10.1016/j.jisa.2018.08.002
Chan, C. K. Y., & Lee, K. K. W. (2023). The AI generation gap: Are Gen Z students more interested in adopting generative AI, such as ChatGPT, in teaching and learning than their Gen X and millennial generation teachers? Smart Learning Environments, 10(1), 60. https://doi.org/10.1186/s40561-023-00269-3
Chaudhary, S. (2024). Driving behavior change with cybersecurity awareness. Computers & security, 142, 103858. https://doi.org/10.1016/j.cose.2024.103858
Chauhan, R., Mehtar, K., Kaur, H., & Alankar, B. (2024, April). Evaluating cyber-crime using machine learning and AI approach for environmental sustainability. In P. Whig, N. Silva, A. A. Elngar, N. Aneja, & P. Sharma (Eds.), Sustainable development through machine learning, AI and IoT: ICSD 2024 (Vol. 2196). Communications in Computer and Information Science. Springer. https://doi.org/10.1007/978-3-031-71729-1_4
Chen, Y., Cui, M., Wang, D., Cao, Y., Yang, P., Jiang, B., Lu, Z., & Liu, B. (2024). A survey of large language models for cyber threat detection. Computers & Security, 145, 104016. https://doi.org/10.1016/j.cose.2024.104016
Cook, S. (2024, May 14). U.S. schools leaked 37.6 million records in 3,713 data breaches. Comparitech. https://www.comparitech.com/blog/vpn-privacy/us-schools-data-breaches/
Essien, E. S., & Egbeji, E. E. (2024). Digitalizing Cyber Security for Data Management in Higher Education Implication for Educational Management in Nigeria. Journal of Advanced Education Philosophy, 8(4), 234- 238. https://doi.org/10.36348/jaep.2024.v08i04.001
Etikan, I., Musa, S. A., & Alkassim, R. S. (2016). Comparison of convenience sampling and purposive sampling. American Journal of Theoretical and Applied Statistics, 5(1), 1-4. https://doi.org/10.11648/j.ajtas.20160501.11
Fadli, R., Surjono, H. D., Sari, R. C., Hidayah, Y., & Eliza, F. (2024). Assessing cybersecurity awareness among vocational students in office administration. International Journal of Safety and Security Engineering, 14(4), 1115–1123. https://doi.org/10.18280/ijsse.140410
Gratian, M., Bandi, S., Cukier, M., Dykstra, J., & Ginther, A. (2018). Correlating human traits and cyber security behavior intentions. Computers & Security, 73, 345–358. https://doi.org/10.1016/j.cose.2017.11.015
He, S. Q., & Chen, I. H. (2024). Internet addiction among teachers: A systematic review. Environment and Social Psychology, 9(6), 2513. https://doi.org/10.54517/esp.v9i6.2513
Ifeanyi, T. T., Nwaosu, O. P., & Ezeanokwasa, F. N. (2024). Digital knowledge and market positioning of micro, small, and medium-scale enterprises (MSMES) in Asaba, Delta State, Nigeria. Journal of Global Accounting, 10(4), 85-106. https://journals.unizik.edu.ng/joga/article/view/5177
Iskandar, I., Putra, D. D., Yasin, A. I., & Khairan, K. (2025). Cyber Smart Campus: Cakap Digital & Aman Siber. PT. Sonpedia Publishing Indonesia.
Kabaila, P., Farchione, D., Alhelli, S., & Bragg, N. (2021). The effect of a Durbin–Watson pretest on confidence intervals in regression. Statistica Neerlandica, 75(1), 4-23. https://doi.org/10.1111/stan.12222
Khader, M., Karam, M., & Fares, H. (2021). Cybersecurity awareness framework for academia. Information, 12(10), 417. https://doi.org/10.3390/info12100417
Lee, S. S. (2024). Predicting the Effects of CyberPatriot Participation, Internet Experience, Gender, and Grade Level on Cybersecurity Judgment (Intuitive and Rational) Among Middle and High School Students: A Quantitative Predictive Correlational Study. (Doctoral dissertation- Liberty University). Virgina. https://digitalcommons.liberty.edu/doctoral/6363
Leekitchwatana, P., Pimdee, P., & Moto, S. (2018). Using the Internet for development of structural equation model of teaching behavior of junior high school teachers. Kasetsart Journal of Social Sciences, 39(3), 868-878. https://so04.tci-thaijo.org/index.php/kjss/article/view/242614
Liluashvili, G. B. (2021). Cyber risk mitigation in higher education. Law & World, 17, 15.
Luo, Y. F., Chen, L. C., Yang, S. C., & Hong, S. (2022). Knowledge, attitude, and practice (KAP) toward COVID-19 pandemic among the public in Taiwan: a cross-sectional study. International Journal of environmental research and public health, 19(5), 2784. https://doi.org/10.3390/ijerph19052784
Ma, K., & Fang, B. (2024). Exploring Generation Z’s expectations at future work: the impact of digital technology on job searching. European Journal of Training and Development, 48(9), 933-953. https://doi.org/10.1108/EJTD-05-2023-0076
Marín, V. I., Carpenter, J. P., Tur, G., & Williamson-Leadley, S. (2023). Social media and data privacy in education: An international comparative study of perceptions among pre-service teachers. Journal of Computers in Education, 10(4), 769–795. https://doi.org/10.1007/s40692-022-00243-x
Muniandy, L., Muniandy, B., & Samsudin, Z. (2017). Cyber security behaviour among higher education students in Malaysia. Journal of Information Assurance & Cybersecurity, 800299. https://doi.org/10.5171/2017.800299
NIST Cybersecurity Framework (CSF) 2.0. (2024, February 26). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.CSWP.29
Nkata, A. S. (2025). Impact of Teaching Cybersecurity Professional Courses for Students of Higher Learning Institutions: What Should the Society Expect? BIMA Journal of Science and Technology, 8(4B), 140-149. https://doi.org/10.56892/bima.v8i4B.1191
O'Brien, R. M. (2007). A Caution Regarding Rules of Thumb for Variance Inflation Factors. Quality & Quantity, 41(5), 673–690. https://doi.org/10.1007/s11135-006-9018-6
Oroni, C. Z., Xianping, F., Ndunguru, D. D., & Ani, A. (2025). Cyber safety in e-learning: The effects of cyber awareness and information security policies with moderating effects of gender and experience levels among e-learning students. Education and Information Technologies, 1-40. https://doi.org/10.1007/s10639-025-13366-2
Papasteri, C., Letzner, R. D., & Pascal, S. (2024). Pandemic KAP framework for behavioral responses: initial development from lockdown data. Current Psychology, 43(26), 22767-22779. https://doi.org/10.1007/s12144-024-05670-w
Parmar, M., & Miles, A. (2024, May). Cyber Security Frameworks (CSFs): An assessment between the NIST CSF v2. 0 and EU Standards. In 2024 Security for Space Systems (3S) (pp. 1-7). IEEE. https://doi.org/10.23919/3S60530.2024.10592293
Phuong, C. (2022). Teaching cybersecurity: A project-based learning and guided inquiry collaborative learning approach (Doctoral dissertation, University of Tennessee at Chattanooga). University of Tennessee at Chattanooga. https://scholar.utc.edu/theses/757
Pimdee, P., & Leekitchwatana, P. (2019). Structural equation modeling of teaching behavior in Internet use of teachers in Thailand. TEM Journal, 8(4), 1499-1507. http://dx.doi.org/10.18421/TEM84-56
Pimdee, P., & Leekitchwatana, P. (2022). Appropriate Internet Use Behavior (AIUB) of Thai preservice teachers: A Hierarchical Linear Model (HLM) analysis. International Journal of Instruction, 15(1), 489-508. https://doi.org/10.29333/iji.2022.15128a
Pollini, A., Callari, T. C., Tedeschi, A., Ruscio, D., Save, L., Chiarugi, F., & Guerri, D. (2022). Leveraging human factors in cybersecurity: An integrated methodological approach. Cognition, Technology & Work, 24(2), 371–390. https://doi.org/10.1007/s10111-021-00683-y
Rohan, R., Pal, D., Hautamäki, J., Funilkul, S., Chutimaskul, W., & Thapliyal, H. (2023). A systematic literature review of cybersecurity scales assessing information security awareness. Heliyon, 9(3), e14234. https://doi.org/10.1016/j.heliyon.2023.e14234
Shah, M. U., Iqbal, F., Rehman, U., & Hung, P. C. K. (2023). A comparative assessment of human factors in cybersecurity: Implications for cyber governance. IEEE Access, 11, 87970–87984. https://doi.org/10.1109/ACCESS.2023.3296580
Shari, A. M. J., Ahmad, M., Razali, R. R. R., & Sujak, A. F. A. (2022, December). Knowledge, attitude, and practices towards internet safety and security among generation Z in Malaysia: A conceptual paper. In Proceedings of the International Conference on Communication, Language, Education, and Social Sciences. CLESS (pp. 4-11). https://doi.org/10.1016/j.heliyon.2024.e32371
Slepian, R. C., Vincent, A. C., Patterson, H., & Furman, H. (2024). Social media, wearables, telemedicine and digital health—A Gen Y and Z perspective. In Reference Module in Biomedical Sciences. http://dx.doi.org/10.1016/B978-0-12-824010-6.00072-1
Taherdoost, H. (2024). A critical review of cybersecurity awareness frameworks and training models. Procedia Computer Science, 235, 1649–1663. https://doi.org/10.1016/j.procs.2024.04.156
Tan, S. (2022, October 10). Generational trends in Thailand’s social media use: How Gen Z differs from other age groups. YouGov. https://tinyurl.com/5n8yctvw
Triplett, W. J. (2023). Addressing cybersecurity challenges in education. International Journal of STEM Education for Sustainability, 3(1), 47-67. https://www.journal.gmpionline.com/index.php/ijses/article/view/132
Rahman, M. M., Tabash, M. I., Salamzadeh, A., Abduli, S., & Rahaman, M. S. (2022). Sampling techniques (probability) for quantitative social science researchers: A conceptual guidelines with examples. Seeu Review, 17(1), 42-51. https://doi.org/10.2478/seeur-2022-0023
Uttley, J. (2019). Power analysis, sample size, and assessment of statistical assumptions—Improving the evidential value of lighting research. Leukos, 5(2-3). https://doi.org/10.1080/15502724.2018.1533851
Wang, C., Tang, H., Zhu, H., Zheng, J., & Jiang, C. (2024). Behavioral authentication for security and safety. Security and Safety, 3, 2024003. https://doi.org/10.1051/sands/2024003
Wannapiroon, N., & Pimdee, P. (2022). Thai undergraduate science, technology, engineering, arts, and math (STEAM), creative thinking and innovation skill development: a conceptual model using a digital virtual classroom learning environment. Education and Information Technologies, 27(4), 5689-5716. https://doi.org/10.1007/s10639-021-10849-w
Zhang, Y., Du, Y., & Liu, C. (2025). Enhancing Cybersecurity Awareness among University Students: A Strategic Approach. Learning & Education, 14(1). https://ojs.piscomed.com/index.php/L-E/article/view/4275
Zineddine, A., Chakir, O., Sadqi, Y., Maleh, Y., Gaba, G. S., Gurtov, A., & Dev, K. (2024). A systematic review of cybersecurity assessment methods for HTTPS. Computers and Electrical Engineering, 115, 109137. https://doi.org/10.1016/j.compeleceng.2024.109137