Abstract

This project presents the design, development, and implementation of an educational website focused on improving user awareness of cybersecurity risks associated with downloading and installing software from the internet. The platform delivers a structured sequence of ten interactive lessons that guide users through key concepts related to identifying legitimate software sources, recognizing and avoiding malware and viruses, and performing secure software installation practices. Each lesson is followed by a short quiz designed to reinforce learning and provide immediate feedback, enabling users to assess their understanding and progress in real time. The instructional framework is cumulative, with each lesson building upon prior material to progressively develop core competencies in safe software acquisition and installation. The integration of formative assessments throughout the learning process supports active engagement and enhances knowledge retention. The website employs a simple, intuitive, and user-centered interface designed for accessibility across both desktop and mobile devices. Interactive features, including quizzes, navigation controls, clickable elements, and automated feedback mechanisms, contribute to an engaging and experiential learning environment. Overall, the project demonstrates a scalable and extensible web-based educational solution that combines instructional design principles with best practices in web development. The resulting platform provides a foundation for future expansion, allowing for the addition of new topics, multimedia content, and enhanced learning modules.

References

• M. Botacin, G. Bertão, P. de Geus, A. Grégio, C. Kruegel, and G. Vigna, “On the security of application installers and online software repositories,” in Detection of Intrusions and Malware, and Vulnerability Assessment (DIMVA 2020), C. Maurice, L. Bilge, G. Stringhini, and N. Neves, Eds., Lecture Notes in Computer Science, vol. 12223. Cham, Switzerland: Springer, 2020. doi: 10.1007/978-3-030-52683-2_10.
• J. Gamba, M. Rashed, A. Razaghpanah, J. Tapiador and N. Vallina-Rodriguez, "An Analysis of Pre-installed Android Software," 2020 IEE Symposium on Security and Privacy (SP), San Francisco, CA, USA, 2020, pp. 1039-1055, doi: 10.1109/SP40000.2020.00013.
• M. Taleby, Q. Li, M. Rabbani, and A. Raza, “A survey on smartphones security: Software vulnerabilities, malware, and attacks,” International Journal of Advanced Computer Science and Applications, vol. 8, no. 10, 2017. doi: 10.14569/IJACSA.2017.081005.
• K. Vaniea and Y. Rashidi, “Tales of software updates: The process of updating software,” in Proc. 2016 CHI Conf. Human Factors in Computing Systems, pp. 3215–3226, 2016.
• Y. Zhou, Z. Wang, W. Zhou, and X. Jiang, “Hey, you, get off of my market: Detecting malicious apps in official and alternative Android markets,” in Proceedings of the Network and Distributed System Security Symposium (NDSS), 2012.
• H. Huang et al., "A Large-Scale Study of Android Malware Development Phenomenon on Public Malware Submission and Scanning Platform," in IEEE Transactions on Big Data, vol. 7, no. 2, pp. 255-270, 1 June 2021, doi: 10.1109/TBDATA.2018.2790439.
• H. Zhu, H. Cao, E. Chen, H. Xiong, and J. Tian, “Mobile app recommendations with security and privacy awareness,” in Proceedings of the 20th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining (KDD), 2014, pp. 951–960.
• L. Maxwell, A. Sanders, J. Skues, and L. Wise, “A content analysis of personal safety apps: Are they keeping us safe or making us more vulnerable?” Violence Against Women, vol. 26, no. 2, pp. 233–248, 2020.
• S. Wu and J. Liu, "Overprivileged Permission Detection for Android Applications," ICC 2019 - 2019 IEEE International Conference on Communications (ICC), Shanghai, China, 2019, pp. 1-6, doi: 10.1109/ICC.2019.8761572.
• F. Kreuter et al., “Collecting survey and smartphone sensor data with an app: Opportunities and challenges around privacy and informed consent,” Social Science Computer Review, vol. 38, no. 5, pp. 533–549, 2020.
• M. Ohm and C. Stuke, “SoK: Practical detection of software supply chain attacks,” in Proceedings of the 18th International Conference on Availability, Reliability and Security (ARES), 2023.
• M. A. Rajab, J. Zarfoss, F. Monrose, and A. Terzis, “The Nocebo effect on the web: An analysis of fake anti-virus distribution,” in Proceedings of the 3rd USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET), 2010.
• W. Börger and L. Lo Iacono, “User perception and response to computer security warnings,” in Proceedings of the 14th International Conference on Availability, Reliability and Security (ARES), 2015.
• Y. Zhou and X. Jiang, "Dissecting Android Malware: Characterization and Evolution," 2012 IEEE Symposium on Security and Privacy, San Francisco, CA, USA, 2012, pp. 95-109, doi: 10.1109/SP.2012.16.
• B. P. Sarma, N. Li, C. Gates, R. Potharaju, C. Nita-Rotaru, and I. Molloy, “Android permissions: A perspective combining risks and benefits,” in Proceedings of the 17th ACM Symposium on Access Control Models and Technologies (SACMAT), 2012.