Avoidance of Information Technology Threats: A Theoretical Perspective

Abstract

JSTOR is a not-for-profit service that helps scholars, researchers, and students discover, use, and build upon a wide range of content in a trusted digital archive. We use information technology and tools to increase productivity and facilitate new forms of scholarship. For more information about JSTOR, please contact support@jstor.org. This content downloaded from 144.82.Abstract This paper describes the development of the technology threat avoidance theory (TTAT), which explains individual IT users ' behavior of avoiding the threat of malicious information technologies. We articulate that avoidance and adoption are two qualitatively different phenomena and contend that tech nology acceptance theories provide a valuable, but incom plete, understanding of users ' IT threat avoidance behavior. Drawing from cybernetic theory and coping theory, TT AT delineates the avoidance behavior as a dynamic positive feedback loop in which users go through two cognitive pro cesses, threat appraisal and coping appraisal, to decide how to cope with IT threats. In the threat appraisal, users will perceive an IT threat if they believe that they are susceptible to malicious IT and that the negative consequences are severe. The threat perception leads to coping appraisal, in which users assess the degree to which the IT threat can be avoided by taking safeguarding measures based on perceived effectiveness and costs of the safeguarding measure and self efficacy of taking the safeguarding measure. TT A posits that users are motivated to avoid malicious IT when they perceive a threat and believe that the threat is avoidable by taking safeguarding measures; if users believe that the threat cannot be fully avoided by taking safeguarding measures, they would engage in emotion-focused coping. Integrating process theory and variance theory, TT AT enhances our under standing of human behavior under IT threats and makes an important contribution to IT security research and practice.

Malware Avoidance Motivations and Behaviors: A Technology Threat Avoidance Replication

“…Drawing on Cybernetic and Coping theories, Liang and Xue (2009) proposed Technology Threat Avoidance Theory to explain users' cyber security motivations in terms of threat perceptions and coping ability. The theory posits that in a given context, an individuals' threat perception is formed based on their views regarding the severity associated with a given cyber threat and their own susceptibility to that threat.…”

Social Networking Websites and Posting Personal Information: An Evaluation of Protection Motivation Theory

“…The results of these studies largely indicated that the same factors that influence an individual's response to health and environmental threats, such as response costs, efficacy, and vulnerability, can influence an individual's response to technology-related threats. Despite the fact that these studies focused primarily on behavioral intentions to adapt one's behavior in the face of security threats (Liang and Xue, 2009;Siponen et al, 2010), no studies have yet linked PMT to the risks associated with making one's personal information publicly available online. We believe that PMT has the potential to help explain the risk assessment and subsequent behavioral changes performed by social networking users.…”

“…Additionally, this study provides insight into maladaptive responses, and has analyzed PMT data in a time-ordered sequence that, to our knowledge, has not been explored in IS research and has seldom been explored elsewhere. In a recent discussion about technology threat avoidance, Liang and Xue (2009) noted that a distinction must be made between the avoidance of malicious technology (a maladaptive behavior) and the adoption of safeguarding technology (an adaptive behavior); while the two behaviors may outwardly provide the same protective results, they are motivated by two different appraisals, an "avoidance-approach" mechanism. The current study provides supporting evidence that such a distinction exists, and the appraisal processes that lead to one behavior or the other need to be more fully understood by researchers and managers.…”

Voter, What Message Will Motivate You To Verify Your Vote?

“…The behaviour-change literature indicates the potential negative effects of risk appeals -they can lead to denial or avoidance [37]. The risk message articulates the threats that face Internet voting.…”