What's in a Cyber Threat Intelligence sharing platform? - Appendix

This upload contains the Artificats i.e. surveys and answer datasets for our ACSAC 2021 paper.

Full paper reference:

Borce Stojkovski, Gabriele Lenzini, Vincent Koenig, and Salvador Rivas. 2021. What’s in a Cyber Threat Intelligence sharing platform?: A mixed-methods user experience investigation of MISP. In Annual Computer Security Applications Conference (ACSAC ’21), December 6–10, 2021, Virtual Event, USA. ACM, New York, NY, USA. https://doi.org/10.1145/3485832.3488030

The research is supported by the Luxembourg National Research Fund through grant PRIDE15/10621687/SPsquared

+++++++++++++++++++++++++++++++++++++++
I) CONTENT:
+++++++++++++++++++++++++++++++++++++++

A - Surveys
|_ "1 - UEQ+demographics.pdf" 
|_ "2 - Sentence Completion.pdf"

B - Raw participant data
|_ "1 - UEQ.csv"
|_ "2 - MISP - SC-Q1.csv"
|_ "2 - MISP - SC-Q2.csv"
|_ "2 - MISP - SC-Q3.csv"
|_ "2 - MISP - SC-Q4.csv"
|_ "2 - MISP - SC-Q5.csv"
|_ "2 - MISP - SC-Q6.csv"
|_ "2 - MISP - SC-Q7.csv"
|_ "2 - MISP - SC-Q8.csv"

+++++++++++++++++++++++++++++++++++++++
II) DETAILS:
+++++++++++++++++++++++++++++++++++++++

---------------------------------------
A - Surveys / 1 - UEQ+demographics.pdf
---------------------------------------
- The file consists of two sections, namely the UEQ (page 1) and the Demographics part (pages 2-3). 
- The User Experience Questionnaire (UEQ) is a validated instrument for measuring the user experience of interactive products that consists of 6 scales with 26 items in total [2]. For more information refer to the UEQ handbook [2] or to Section 4.1 of our paper.
- The Demographics part consists of 15 questions investigating the types of users and their respective needs on the MISP platform.

---------------------------------------
A - Surveys / 2 - Sentence Completion.pdf
---------------------------------------
- The file consists of 8 questions i.e. sentence completion stems presented to our study participants as explained in Section 4.1 of our paper.

---------------------------------------
B - Raw participant data / "1 - UEQ.csv"
---------------------------------------
The file contains the (annonymized) raw participant data corresponding to the UEQ and demographics sections of the survey (file: "A - Surveys / 1 - UEQ+demographics.pdf"). It consists of the following fields:
- Participant ID
- 26 values (Q-ID 1.1 .. 1.26) corresponding to the 26 items of the UEQ scale
- 8 values (Q-ID 2.1.1 .. 2.1.8) corresponding to the Demographics question No. 1 ("Which of the following roles best describes how you (intend to) use MISP?")
- 14 values (Q-ID 2.2.1 .. 2.2.14) correspondign to the Demographics question No. 2. ("Which of the following categories best describes the organization you work in?")
- 1 value (Q-ID 2.3) corresponding to the Demographics question No. 3 ("How long have you been using MISP?")
- 1 value (Q-ID 2.4) corresponding to the Demographics question No. 4 ("If applicable, how often do you use MISP?")
- 1 value (Q-ID 2.5) corresponding to the Demographics question No. 5 ("Have you attended a training session on MISP before?")
- 1 value (Q-ID 2.6) corresponding to the Demographics question No. 6 ("Have you used the MISP training materials before?")
- 1 value (Q-ID 2.7) corresponding to the Demographics question No. 7 ("Have you used the MISP virtual machine before? ")
- 1 value (Q-ID XTR2.1) corresponding to the Demographics question No. 8 ("Have you used PyMISP - the Python library to access MISP via the API before? ")
- 1 value (Q-ID XTR2.2) corresponding to the Demographics question No. 9 ("Have you cloned a MISP repository before? ")
- 1 value (Q-ID XTR2.3) corresponding to the Demographics question No. 10 ("Have you contributed to any of the MISP repositories before? ")
- 1 value (Q-ID 2.8) corresponding to the Demographics question No. 11 ("Do you have an engineering or computer science background? ")
- 1 value (Q-ID 2.9) corresponding to the Demographics question No. 12 ("What is the highest level of school you have completed / degree you have received? ")
- 1 value (Q-ID 2.10) corresponding to the Demographics question No. 13 ("What is your age group?")
- 1 value (Q-ID 2.11) corresponding to the Demographics question No. 14 ("To which gender identity do you most identify?")

---------------------------------------
B - Raw participant data / "2 - SC-Q[1..8].csv"
---------------------------------------
The 8 files contain the raw participant responses to the different sentence completion questions (see file: "A - Surveys / 2 - Sentence Completion.pdf"). Each file consists of two fields:
- Participant ID 
- 1 value for the sentence completion input.

For instance, the file "2 - SC-Q1.csv" corresponds to the Sentence completion stem "When I use MISP, I feel …". Similarly, "2 - SC-Q2.csv" corresponds to the Sentence completion stem "MISP is best for …". The same logic applies to all 8 files ("2 - SC-Q[1..8].csv").

REFERENCES:

[1] MISP. 2021. MISP - Open Source Threat Intelligence Platform & Open Standards For Threat Information Sharing. Retrieved August 15, 2021 from https://www.misp-project.org

[2] UEQ. 2021. User Experience Questionnaire. Retrieved August 15, 2021 from https://www.ueq-online.org/

[3] UEQ. 2021. User Experience Questionniare Handbook. Version 8 (31.12.2019). Retrieved August 15, 2021 from: https://www.ueq-online.org/Material/Handbook.pdf