Human-centered Cyber Security: Bridging the Gap Between Knowledge and Action