What's in a Cyber Threat Intelligence sharing platform? - Appendix

This upload contains the Artificats i.e. surveys and answer datasets for our ACSAC 2021 paper.<br> <br> Full paper reference: Borce Stojkovski, Gabriele Lenzini, Vincent Koenig, and Salvador Rivas. 2021. What’s in a Cyber Threat Intelligence sharing platform?: A mixed-methods user experience investigation of MISP. In Annual Computer Security Applications Conference (ACSAC ’21), December 6–10, 2021, Virtual Event, USA. ACM, New York, NY, USA. https://doi.org/10.1145/3485832.3488030 The research is supported by the Luxembourg National Research Fund through grant PRIDE15/10621687/SPsquared<br> +++++++++++++++++++++++++++++++++++++++<br> I) CONTENT:<br> +++++++++++++++++++++++++++++++++++++++ A - Surveys<br> |_ "1 - UEQ+demographics.pdf" <br> |_ "2 - Sentence Completion.pdf" B - Raw participant data<br> |_ "1 - UEQ.csv"<br> |_ "2 - MISP - SC-Q1.csv"<br> |_ "2 - MISP - SC-Q2.csv"<br> |_ "2 - MISP - SC-Q3.csv"<br> |_ "2 - MISP - SC-Q4.csv"<br> |_ "2 - MISP - SC-Q5.csv"<br> |_ "2 - MISP - SC-Q6.csv"<br> |_ "2 - MISP - SC-Q7.csv"<br> |_ "2 - MISP - SC-Q8.csv" <br> +++++++++++++++++++++++++++++++++++++++<br> II) DETAILS:<br> +++++++++++++++++++++++++++++++++++++++ ---------------------------------------<br> A - Surveys / 1 - UEQ+demographics.pdf<br> ---------------------------------------<br> - The file consists of two sections, namely the UEQ (page 1) and the Demographics part (pages 2-3). <br> - The User Experience Questionnaire (UEQ) is a validated instrument for measuring the user experience of interactive products that consists of 6 scales with 26 items in total [2]. For more information refer to the UEQ handbook [2] or to Section 4.1 of our paper.<br> - The Demographics part consists of 15 questions investigating the types of users and their respective needs on the MISP platform. <br> ---------------------------------------<br> A - Surveys / 2 - Sentence Completion.pdf<br> ---------------------------------------<br> - The file consists of 8 questions i.e. sentence completion stems presented to our study participants as explained in Section 4.1 of our paper. <br> ---------------------------------------<br> B - Raw participant data / "1 - UEQ.csv"<br> ---------------------------------------<br> The file contains the (annonymized) raw participant data corresponding to the UEQ and demographics sections of the survey (file: "A - Surveys / 1 - UEQ+demographics.pdf"). It consists of the following fields:<br> - Participant ID<br> - 26 values (Q-ID 1.1 .. 1.26) corresponding to the 26 items of the UEQ scale<br> - 8 values (Q-ID 2.1.1 .. 2.1.8) corresponding to the Demographics question No. 1 ("Which of the following roles best describes how you (intend to) use MISP?")<br> - 14 values (Q-ID 2.2.1 .. 2.2.14) correspondign to the Demographics question No. 2. ("Which of the following categories best describes the organization you work in?")<br> - 1 value (Q-ID 2.3) corresponding to the Demographics question No. 3 ("How long have you been using MISP?")<br> - 1 value (Q-ID 2.4) corresponding to the Demographics question No. 4 ("If applicable, how often do you use MISP?")<br> - 1 value (Q-ID 2.5) corresponding to the Demographics question No. 5 ("Have you attended a training session on MISP before?")<br> - 1 value (Q-ID 2.6) corresponding to the Demographics question No. 6 ("Have you used the MISP training materials before?")<br> - 1 value (Q-ID 2.7) corresponding to the Demographics question No. 7 ("Have you used the MISP virtual machine before? ")<br> - 1 value (Q-ID XTR2.1) corresponding to the Demographics question No. 8 ("Have you used PyMISP - the Python library to access MISP via the API before? ")<br> - 1 value (Q-ID XTR2.2) corresponding to the Demographics question No. 9 ("Have you cloned a MISP repository before? ")<br> - 1 value (Q-ID XTR2.3) corresponding to the Demographics question No. 10 ("Have you contributed to any of the MISP repositories before? ")<br> - 1 value (Q-ID 2.8) corresponding to the Demographics question No. 11 ("Do you have an engineering or computer science background? ")<br> - 1 value (Q-ID 2.9) corresponding to the Demographics question No. 12 ("What is the highest level of school you have completed / degree you have received? ")<br> - 1 value (Q-ID 2.10) corresponding to the Demographics question No. 13 ("What is your age group?")<br> - 1 value (Q-ID 2.11) corresponding to the Demographics question No. 14 ("To which gender identity do you most identify?") <br> ---------------------------------------<br> B - Raw participant data / "2 - SC-Q[1..8].csv"<br> ---------------------------------------<br> The 8 files contain the raw participant responses to the different sentence completion questions (see file: "A - Surveys / 2 - Sentence Completion.pdf"). Each file consists of two fields:<br> - Participant ID <br> - 1 value for the sentence completion input. For instance, the file "2 - SC-Q1.csv" corresponds to the Sentence completion stem "When I use MISP, I feel …". Similarly, "2 - SC-Q2.csv" corresponds to the Sentence completion stem "MISP is best for …". The same logic applies to all 8 files ("2 - SC-Q[1..8].csv"). REFERENCES: [1] MISP. 2021. MISP - Open Source Threat Intelligence Platform &amp; Open Standards For Threat Information Sharing. Retrieved August 15, 2021 from https://www.misp-project.org [2] UEQ. 2021. User Experience Questionnaire. Retrieved August 15, 2021 from https://www.ueq-online.org/ [3] UEQ. 2021. User Experience Questionniare Handbook. Version 8 (31.12.2019). Retrieved August 15, 2021 from: https://www.ueq-online.org/Material/Handbook.pdf