\section{Security visualisation for general practitioners}
In this chapter, is addressed an important gap in the existing literature regarding the application of security visualization for non-expert users, specifically focusing on general practitioners. While numerous studies have explored security visualization in the context of cybersecurity professionals and experts, there is a notable absence of research dedicated to understanding the needs and challenges faced by non-expert users in the field of cybersecurity. By not addressing the specific needs and challenges faced by non-expert users, we risk leaving a significant portion of users vulnerable to cybersecurity threats and lacking the necessary tools to make informed decisions. One of the key implications of this gap is the potential for a lack of awareness and understanding among non-expert users regarding the importance of cybersecurity. Without effective visualization techniques tailored to their needs, general practitioners may struggle to grasp the complexities of cybersecurity threats and the potential impact on their practices. This can lead to a lack of proactive measures and an increased susceptibility to cyber attacks.

In the research conducted by Legg \cite{enhancing_cyber}, for instance, the focus is on enhancing cybersecurity situation awareness for non-expert users through the use of visual analytics. The study acknowledges that non-expert users may be inclined to take an active role in understanding cybersecurity if appropriate tools are available to better comprehend their cyber activity. To address this, the researchers developed an initial prototype tool called ePSA (Enhanced Personal Situation Awareness), which consists in two main components: one for collecting and storing network activity data, and another for analyzing and visualizing this data. The goal of ePSA is to provide non-expert users with a comprehensive overview of their online activity and promote their awareness of potential cybersecurity threats. Subsequently, a small-scale survey was conducted to gather insights from non-expert users regarding their cybersecurity concerns, whose results revealed that a significant portion of participants expressed worry about their cybersecurity when accessing the internet, but however, many participants lacked awareness of how their devices communicate online. The research emphasizes the importance of visualizations and interactions in helping non-expert users filter and understand potentially interesting activity, demonstrating how by providing intuitive representations of network data, these visualizations can encourage users to engage with cybersecurity tools and enhance their awareness of online activity.

Another noteworthy study, conducted by Sturdee et al. \cite{sturdee-2021}, focuses on how concepts related to cybersecurity are conceptualized and interpreted by non-expert users. Their research aim to explore the use of non-expert sketches as a tool for understanding cybersecurity concepts. The study involved collecting sketches from non-expert participants based on themes of risk, privacy, trust, and cybersecurity. The sketches were analyzed using a qualitative approach, and the findings were categorized into themes and sub-themes, and the study found that non-expert sketches can provide valuable insights into how people perceive and understand cybersecurity concepts. The analyzed sketches revealed common themes and sub-themes related to risk, privacy, trust, and cybersecurity, such as the use of physical dangers to depict risk and the depiction of humans to represent trust. The study also found that non-expert representations can help identify gaps in cybersecurity knowledge and understanding among the general public. The conclusion of the research suggests that non-expert representations of cybersecurity concepts can be a useful tool for  education and awareness and recommends that cybersecurity professionals and educators incorporate similar methodologies into their training and awareness programs to improve public understanding of cybersecurity concepts. In the end the study also suggests that future research should explore the use of non-expert conceptual metaphors in other areas of cybersecurity, such as threat modeling and risk assessment.

These recommendations for future research directions are supported not only by individual studies but also by surveys focusing on security visualization \cite{systematic_literature_review}. Specifically, among the key target personas identified, the ``higher-level decision maker" stands out as a critical stakeholder who necessitates a heightened level of cybersecurity awareness. In order for higher-level decision makers, including executives, to effectively and efficiently make cybersecurity decisions, it is crucial that they have access to comprehensive information about the organization's potential cybersecurity risks, opportunities, and challenges. This information should be presented in a format that is easily understandable and applicable to the business dimensions. Therefore, future research endeavors could be directed towards specifically designing cybersecurity awareness visualizations that cater to the needs of managers and higher-level decision makers. Gaining a deeper understanding of their information requirements and visualization preferences will facilitate the development of visualizations that are effective for this particular group.

In conclusion, this chapter highlights the absence of research in the literature regarding security visualization for non-expert users, specifically general practitioners, pointing out the need for further exploration and development. By addressing the specific challenges and requirements of non-expert users, we can pave the way for a more inclusive and accessible approach to cybersecurity.