Behavioural Change Approaches to
Cybersecurity
“Nudging Safer Wi-Fi Choices: Colour-Coding and VPN
Prompts in Public Networks”
Dr. Tommy van Steen & Julia Prümmer
Group Paper
11-12-2025
S3715930
,1
, 2
Introduction
In an increasingly digital world, people use public Wi-Fi regularly to stay connected in both their
personal and work lives. As public Wi-Fi becomes more widely available, it is important to take
a closer look at how people use it and the risks that come with it. Even though these networks are
convenient, they also leave users vulnerable to security issues. This paper focuses on how people
behave when using public Wi-Fi and the problems that arise from that. The main aim is to
explore this topic from a behavioural perspective and look for ways to encourage safer online
habits. To do so, this paper will use the first four phases of the PATH(S) model developed by
Buunk et al. (2021). This model offers a practical, systematic approach for moving from problem
identification to the design and evaluation of potential solutions. This paper begins by outlining
the specific problem at hand, the ‘’Problem’’ phase, followed by the ‘’Analysis’’ phase in which
relevant theoretical perspectives and contributing factors are examined. In the ‘’Test’’ phase, a
process model is developed and evaluated based on the insights of the analysis. The final step,
the ‘’Help’’ phase, focuses on possible interventions and the extent to which they may prove
effective (Buunk et al., 2021, pp. 1-26). Using this PATH(S) model as the main framework gives
the paper a coherent structure by clearly connecting the problem, theory, and intervention.
Building on this structure, the next chapter will outline the background of the problem.
Background of the problem
This part of the paper will analyse the problem of people's cybersecurity behaviour when
connecting to public Wi-Fi networks. Some questions need to be considered using the PATH(S)
model from Buunk et al. (2021, pp. 27-64). The answers to these questions will be linked to
findings from existing literature to analyse the problem. The first question is, “What is the
problem?” The problem is that connecting to a public Wi-Fi network exposes you, your device,
and your data to potential threats. There is a chance that you, your data, and your device will be
exposed to potential interception and misuse. In a comprehensive study of 67 public Wi-Fi
hotspots in Montréal, Ali et al. (2019, pp. 86–91) discovered that almost all portals used
third-party trackers and occasionally disclosed personal information (PII) before users agreed to
Cybersecurity
“Nudging Safer Wi-Fi Choices: Colour-Coding and VPN
Prompts in Public Networks”
Dr. Tommy van Steen & Julia Prümmer
Group Paper
11-12-2025
S3715930
,1
, 2
Introduction
In an increasingly digital world, people use public Wi-Fi regularly to stay connected in both their
personal and work lives. As public Wi-Fi becomes more widely available, it is important to take
a closer look at how people use it and the risks that come with it. Even though these networks are
convenient, they also leave users vulnerable to security issues. This paper focuses on how people
behave when using public Wi-Fi and the problems that arise from that. The main aim is to
explore this topic from a behavioural perspective and look for ways to encourage safer online
habits. To do so, this paper will use the first four phases of the PATH(S) model developed by
Buunk et al. (2021). This model offers a practical, systematic approach for moving from problem
identification to the design and evaluation of potential solutions. This paper begins by outlining
the specific problem at hand, the ‘’Problem’’ phase, followed by the ‘’Analysis’’ phase in which
relevant theoretical perspectives and contributing factors are examined. In the ‘’Test’’ phase, a
process model is developed and evaluated based on the insights of the analysis. The final step,
the ‘’Help’’ phase, focuses on possible interventions and the extent to which they may prove
effective (Buunk et al., 2021, pp. 1-26). Using this PATH(S) model as the main framework gives
the paper a coherent structure by clearly connecting the problem, theory, and intervention.
Building on this structure, the next chapter will outline the background of the problem.
Background of the problem
This part of the paper will analyse the problem of people's cybersecurity behaviour when
connecting to public Wi-Fi networks. Some questions need to be considered using the PATH(S)
model from Buunk et al. (2021, pp. 27-64). The answers to these questions will be linked to
findings from existing literature to analyse the problem. The first question is, “What is the
problem?” The problem is that connecting to a public Wi-Fi network exposes you, your device,
and your data to potential threats. There is a chance that you, your data, and your device will be
exposed to potential interception and misuse. In a comprehensive study of 67 public Wi-Fi
hotspots in Montréal, Ali et al. (2019, pp. 86–91) discovered that almost all portals used
third-party trackers and occasionally disclosed personal information (PII) before users agreed to
