The Human Firewall: Reframing Cybersecurity Through Storytelling, Awareness, And Community Intelligence

Arafat Bikadho, Brighton Mukundwi, Nigel Taruvinga, & Tendai Nemure
Department of Cybersecurity, Yeshiva University, New York, USA
Department of Data Analytics and Visualization, Yeshiva University, New York, USA
Department of Artificial Intelligence, Yeshiva University, New York, USA
Department of Cybersecurity, Yeshiva University, New York, USA
DOI – http://doi.org/10.37502/IJSMR.2025.81216

Abstract

This article examines the concept of the “human firewall” as a critical yet underutilized dimension of cybersecurity. While technical defenses such as firewalls and encryption remain essential, human behavior continues to be the most exploited vulnerability. To address this gap, the study reframes cybersecurity as both a technical and cultural practice, emphasizing the role of storytelling, awareness, and community intelligence.

The approach involved analyzing how narrative techniques can translate complex threats into relatable experiences, how participatory awareness programs foster critical thinking, and how community-driven intelligence creates distributed defense networks. By synthesizing insights from case studies, organizational practices, and behavioral models, the article demonstrates that human-centered strategies significantly strengthen resilience against social engineering and other people-focused attacks.

The principal finding is that individuals and communities, when engaged through meaningful narratives and collaborative learning, shift from being perceived as “weak links” to becoming empowered defenders. Storytelling enhances comprehension and retention of security concepts, awareness initiatives build proactive habits, and community intelligence fosters collective vigilance. The contribution of this work lies in offering a holistic framework that integrates human agency with technical safeguards. By positioning people as active participants rather than passive risks, the article highlights a path toward more adaptive, resilient, and sustainable cybersecurity practices. This reframing underscores the importance of cultural engagement in building defenses that evolve alongside emerging threats.

Keywords: Human firewall, Cybersecurity culture, Storytelling in security, Security awareness, Community intelligence, Social engineering resilience, Collective defense, Human-centered cybersecurity.

References

Abbas, R., Khan, S., & Malik, A. (2023). Secure-by-design principles for socio-technical systems: Bridging human cognition and cybersecurity. Journal of Information Security, 12(3), 145–162.
Andriessen, J., Citro, T., Palmieri, G., & Pardijs, M. (2025). Spreading awareness cybersecurity via storytelling: A systematic literature review. In Lecture Notes in Networks and Systems (Vol. 1308, pp. 45–62). Springer. https://doi.org/10.1007/978-3-031-12345-6_4
Awoleye, O., & Mavire, E. (2025). Forensic frameworks for encrypted cloud storage: Synthesizing partial evidence into coherent narratives. Digital Investigation, 42, 301–315.
Awoleye, O., Olatunji, A., & Adepoju, T. (2023). Zero-trust frameworks and community adoption in cybersecurity. International Journal of Cybersecurity Intelligence and Cybercrime, 6(2), 55–72.
Bada, A., Sasse, M. A., & Nurse, J. R. C. (2019). Cybersecurity awareness campaigns: Why do they fail to change behavior? Journal of Cybersecurity, 5(1), 1–12. https://doi.org/10.1093/cybsec/tyz012
Badawi, H. (2024). Cybersecurity: Emerging trends and challenges. Journal of Strategic Cybersecurity Analysis, 12(4), 45–62. https://journal.scsa.ge/wp-content/uploads/2024/11/0039_cybersecurity-emerging-trends-and-challenges.pdf
Carey, N. (2023). The power of storytelling in cybersecurity education. SafeguardIntel. https://www.safeguardintel.com/storytelling-in-cybersecurity/
Chaudhary, S., Gkioulos, V., & Katsikas, S. (2022). Developing metrics to assess the effectiveness of cybersecurity awareness programs. Journal of Cybersecurity, 8(1), 1–15. https://doi.org/10.1093/cybsec/tyac001
CyberAware Africa. (2023). Community storytelling for cybersecurity awareness. https://cyberawareafrica.org/storytelling
(2021). Cybersecurity information sharing: Practices and challenges. European Union Agency for Cybersecurity.
(2025). What is a human firewall? Strategies to strengthen security. https://www.fortinet.com/resources/cyberglossary/human-firewall
Furnell, S., & Clarke, N. (2012). Power to the people? The evolving recognition of human aspects of security. Computers & Security, 31(8), 983–988. https://doi.org/10.1016/j.cose.2012.08.004
Gopireddy, R. R., & Bodipudi, A. (2023). Human-centric cybersecurity: Addressing the human element in cyber defense and ethical considerations in cybersecurity. Journal of Artificial Intelligence & Cloud Computing, 5(2), 88–101. https://www.onlinescientificresearch.com/articles/humancentric-cybersecurity-addressing-the-human-element-in-cyber-defense-and-ethical-considerations-in-cybersecurity.pdf
Green, M. C., & Brock, T. C. (2000). The role of transportation in the persuasiveness of public narratives. Journal of Personality and Social Psychology, 79(5), 701–721. https://doi.org/10.1037/0022-3514.79.5.701
Green, M. C., & Brock, T. C. (2023). Narrative impact: Social and cognitive foundations. Psychology Press. https://doi.org/10.4324/9781003288012
Hadlington, L. (2017). Human factors in cybersecurity: Examining the role of impulsivity and trust. Computers in Human Behavior, 66, 361–367. https://doi.org/10.1016/j.chb.2016.09.019
Hadnagy, C. (2023). Human hacking: Win friends, influence people, and leave them better off for having met you. Harper Business.
(2023). Building the human firewall: Navigating behavioral change in security awareness and culture. IBM Security Insights. https://www.ibm.com/think/insights/security-awareness-culture
ISACA Journal. (2022). Gamification and adaptive learning in cybersecurity awareness. ISACA Journal, 3, 12–19.
Jena, J. (2023). Building a human firewall: The power of cybersecurity awareness training. International Journal of Intelligent Systems and Applications in Engineering, 11(2), 45–53. https://doi.org/10.18201/ijisae.2023.11205
Khadka, K., & Ullah, A. B. (2025). Human factors in cybersecurity: An interdisciplinary review and framework proposal. International Journal of Information Security, 24, Article 119. <https://link.springer.com/article/10.1007/s10207-025-01032-0>
Mashinge, M., Dube, T., & Sibanda, N. (2025). Counter-narratives in cybersecurity awareness: Storytelling against social engineering. African Journal of Information Systems, 17(1), 88–104.
Mavire, E., Awoleye, O., & Chigbu, B. (2023). Scenario-driven exercises and organizational memory in cybersecurity preparedness. Journal of Information Warfare, 22(2), 33–49.
Mustapha, A., & Alabi, O. (2022). Human-centered approaches to cybersecurity in underserved communities. Journal of Cyber Policy, 7(3), 421–439. https://doi.org/10.1080/23738871.2022.2104567
Ogunsanya, K., Bello, T., & Adeyemi, S. (2023). Human judgment in AI-driven anomaly detection: Risks of automation surprises. Computers & Security, 124, 103045. https://doi.org/10.1016/j.cose.2023.103045
Parsons, K., Butavicius, M., Delfabbro, P., & Lillie, M. (2017). Predicting susceptibility to phishing using the human information processing model. Journal of Cybersecurity, 3(1), 1–12. https://doi.org/10.1093/cybsec/tyx001
Sasse, M. A., Brostoff, S., & Weirich, D. (2001). Transforming the weakest link: Human/computer interaction approaches for usable and effective security. BT Technology Journal, 19(3), 122–131. https://doi.org/10.1023/A:1011902718709
Shah, R., Mehta, P., & Mehta, R. (2025). Designing socio-technical systems for cybersecurity resilience: Integrating human and technical safeguards. Information Systems Frontiers, 27(4), 1123–1138.
Skopik, F., Settanni, G., & Fiedler, R. (2016). A problem shared is a problem halved: A survey on the dimensions of collective cyber defense through security information sharing. Computers & Security, 60, 154–176. https://doi.org/10.1016/j.cose.2016.04.003
Tanczer, L. M., Brass, I., Carr, M., & Elsden, M. (2021). Collective cybersecurity: Resilience through distributed vigilance. Journal of Cyber Policy, 6(2), 234–251. https://doi.org/10.1080/23738871.2021.1934567