Scroll Top
NEWS
NEWS
NEWS

Digital Activities of Daily Living: A Foundational Paradigm for Cybersecurity

In the realm of public health, the concept of “Activities of Daily Living” (ADL) has been a cornerstone since the 1950s. ADLs are the essential activities individuals must perform to live independently, such as eating, bathing, dressing, and managing personal hygiene. These foundational tasks provide a helpful framework for assessing the functional status of individuals and designing interventions to improve health and quality of life. In the modern age, where do essential digital activities fit in?

Healthcare and public health communities utilize Activities of Daily Living to assess independence and quality of life, enable early intervention, and provide personalized care. They also support a holistic approach to health by targeting necessary treatments and serving as key indicators for improving overall well-being. Translating these concepts to the digital world can similarly aid in targeted interventions, progress monitoring, resource allocation, and policy development, fostering a structured and proactive approach to digital security.

Drawing inspiration from this well-established concept in public health, this post explores “Digital Activities of Daily Living” (DADL) as a foundational idea for cybersecurity as introduced in the recent workshop report on Cyber Public Health. DADLs represent the critical digital tasks that individuals, organizations, and even nations must perform to maintain a healthy and secure cyber ecosystem. Just as ADLs are crucial for physical well-being, DADLs are essential for modern digital well-being.

What Are Digital Activities of Daily Living?

DADLs are integral to modern daily life, ensuring connectivity, productivity, financial management, and access to information and services. Just as ADLs are vital for physical well-being, DADLs are essential for digital fluency and effective online living. Examples of today’s digital daily living include online shopping, navigation, file management and cloud storage, communicating, and online banking. The complete list of DADLs remains to be researched and defined.

The Utility of Defining DADLs

Establishing a clear and comprehensive list of DADLs offers several benefits:

  1. Standardization: A standardized list of DADLs provides a common framework for cybersecurity education, training, and awareness programs. This ensures that everyone—from individuals to large organizations—understands the basic activities required to maintain digital health.
  2. Assessment: Just as evaluations of ADLs are used to assess an individual’s ability to live independently, evaluations of DADLs can be used to assess an individual’s or organization’s cybersecurity posture. Regular assessment of DADLs can highlight areas needing improvement. 
  3. Intervention Design: Public health interventions often focus on improving ADLs. Similarly, cybersecurity initiatives can be designed to support and enhance DADLs, providing targeted resources and tools to help individuals and organizations perform these critical activities effectively.
  4. Policy Development: Policymakers can use the concept of DADLs to craft regulations and guidelines that promote cybersecurity best practices. By ensuring that essential digital activities are performed regularly, we can enhance the overall security of the cyber ecosystem.

Why Should You Get Involved?

The cybersecurity landscape is ever-evolving, with new threats emerging constantly. By embracing the concept of DADLs, together we can create a proactive and resilient digital environment. Here’s how you can contribute:

  • Join the Discussion: Engage with cybersecurity professionals and public health experts to refine and expand the list of DADLs. Your insights and experiences are valuable in shaping this foundational concept.
  • Educate and Advocate: Share the concept of DADLs within your networks. Educate others about the importance of these daily digital activities and advocate for their inclusion in cybersecurity training and awareness programs.
  • Innovate Solutions: Develop tools, resources, and technologies that support the execution of DADLs. From password managers to automated update systems, innovative solutions can simplify these essential tasks.

Conclusion

The introduction of Digital Activities of Daily Living is a call to action for the cybersecurity community. By drawing parallels to the well-established concept of ADLs in public health, we can create a robust framework to enhance our digital well-being. Let’s work together to define, promote, and implement DADLs, ensuring a secure and resilient cyber ecosystem for all.

For more information on how cybersecurity intersects with public health, explore CyberGreen’s Cyber Public Health initiatives and research. Join us in making the digital world a safer place, one daily activity at a time.


 

To learn more about CyberGreen’s ongoing research and activities, please sign up for the mailing list.

 

Dr. Josiah Dykstra is the Director of Strategic Initiatives at Trail of Bits. He solves ambitious problems by blending high-end security research with a real-world attacker mentality to fortify the code powering the world’s most critical organizations and devices. Dr. Dykstra is an active speaker and author, including 50+ research articles, and is a co-author of the award-winning book Cybersecurity Myths and Misconceptions (Pearson, 2023).

 
 

Comments (1)

[…] “DADLs represent the critical digital tasks that individuals, organizations, and even nations must perform to maintain a healthy and secure cyber ecosystem. Just as ADLs are crucial for physical well-being, DADLs are essential for modern digital well-being,” Josiah Dykstra, director, Strategic Initiatives, Trail of Bits, wrote in a recent CyberGreen blog.  […]

Comments are closed.

Privacy Preferences
When you visit our website, it may store information through your browser from specific services, usually in form of cookies. Here you can change your privacy preferences. Please note that blocking some types of cookies may impact your experience on our website and the services we offer.

PRIVACY POLICY

CyberGreen (“us”, “we”, or “our”) operates the CyberGreen website (the “Website Service”).

This page informs you of our policies regarding the collection, use and disclosure of Personal Information when you use our Website Service.

We will not use or share your information with anyone except as described in this Privacy Policy.

We use your Personal Information for providing and improving the Website Service. By using the Website Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms of Use, accessible at https://www.cybergreen.net.

MANUAL INFORMATION COLLECTION AND USE

While using our Website Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information (“Personal Information”) may include, but is not limited to:

  • Name
  • Email address
  • Affiliation
  • Internet Protocol (“IP”) address/range (if requesting opt out from CyberGreen scans)

BROWSER INFORMATION (LOG DATA)

We collect information that your browser sends whenever you visit our Website Service (“Log Data”). This Log Data may include information such as your computer’s IP address, browser type, browser version, the pages of our Website Service that you visit, the time and date of your visit, the time spent on those pages and other statistics.

COOKIES

Cookies are files with small amounts of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer’s hard drive.

We use cookies to collect, store, and/or correlate information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Website Service.

SERVICE PROVIDERS

We may employ third-party companies and individuals to facilitate our Website Service, to provide the Website Service on our behalf, to perform Website Service-related services or to assist us in analyzing how our Website Service is used.

These third parties have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

SECURITY

The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.

LINKS TO OTHER SITES

Our Website Service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over, and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

CHILDREN’S PRIVACY

Our Website Service does not address anyone under the age of 18 (“Children”).

We do not knowingly collect personally identifiable information from children under 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Information, please contact us. If we discover that a child under 18 has provided us with Personal Information, we will delete such information from our servers immediately.

COMPLIANCE WITH LAWS

We will disclose your Personal Information where required to do so by law or subpoena.

CHANGES TO THIS PRIVACY POLICY

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

CONTACT US

If you have any questions about this Privacy Policy, please contact us.

TERMS OF USE

The CyberGreen Institute (“CyberGreen”) Is a non-profit, charitable organization dedicated to the creation and dissemination of metrics measuring the Cyber health of networks along with related data, metrics, and analysis. We also assist network operators with the adoption of Cyber hygiene best practices and risk remediation. A big part of our mission is the collection, calculation, and public distribution of our CyberGreen Index. The CyberGreen Index and the other data that we publish on this website is released under the Affero General Public License (version 3) (the “License”). The use of License ensures that our data remains freely accessible and freely useable by members of the public. (In rare circumstances, we may use another license to distribute data, in which case the specific data set will not be available without a click-thru notice specifying the specific license that applies.)

We do ask that you cite us properly in any academic work as the source for anything that you take from this website. If you are a commercial firm and wish to incorporate our data into a commercial product, you must acknowledge CyberGreen as the source of the data that you used and provide your customers with a link to this website with simple instructions on how to find the data that you took from our site.

We do not publish personally identifiable information (PII) or other information that implicates third party privacy rights. CyberGreen is committed to being compliant with GDPR. Our compliance efforts have been certified by the Institute for Social Internet Public Policy (ISIPP).

TERMS OF USE

The CyberGreen Institute (“CyberGreen”) Is a non-profit, charitable organization dedicated to the creation and dissemination of metrics measuring the Cyber health of networks along with related data, metrics, and analysis. We also assist network operators with the adoption of Cyber hygiene best practices and risk remediation. A big part of our mission is the collection, calculation, and public distribution of our CyberGreen Index. The CyberGreen Index and the other data that we publish on this website is released under the Affero General Public License (version 3) (the “License”). The use of License ensures that our data remains freely accessible and freely useable by members of the public. (In rare circumstances, we may use another license to distribute data, in which case the specific data set will not be available without a click-thru notice specifying the specific license that applies.)

We do ask that you cite us properly in any academic work as the source for anything that you take from this website. If you are a commercial firm and wish to incorporate our data into a commercial product, you must acknowledge CyberGreen as the source of the data that you used and provide your customers with a link to this website with simple instructions on how to find the data that you took from our site.

We do not publish personally identifiable information (PII) or other information that implicates third party privacy rights. CyberGreen is committed to being compliant with GDPR. Our compliance efforts have been certified by the Institute for Social Internet Public Policy (ISIPP).

TERMS OF USE

The CyberGreen Institute (“CyberGreen”) Is a non-profit, charitable organization dedicated to the creation and dissemination of metrics measuring the Cyber health of networks along with related data, metrics, and analysis. We also assist network operators with the adoption of Cyber hygiene best practices and risk remediation. A big part of our mission is the collection, calculation, and public distribution of our CyberGreen Index. The CyberGreen Index and the other data that we publish on this website is released under the Affero General Public License (version 3) (the “License”). The use of License ensures that our data remains freely accessible and freely useable by members of the public. (In rare circumstances, we may use another license to distribute data, in which case the specific data set will not be available without a click-thru notice specifying the specific license that applies.)

We do ask that you cite us properly in any academic work as the source for anything that you take from this website. If you are a commercial firm and wish to incorporate our data into a commercial product, you must acknowledge CyberGreen as the source of the data that you used and provide your customers with a link to this website with simple instructions on how to find the data that you took from our site.

We do not publish personally identifiable information (PII) or other information that implicates third party privacy rights. CyberGreen is committed to being compliant with GDPR. Our compliance efforts have been certified by the Institute for Social Internet Public Policy (ISIPP).