The psychology of security

Communications of the ACM

Volumn 51, Issue 4, 2008, Pages 34-40

  West, Ryan ^a  

^a DELL INC   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER AIDED SOFTWARE ENGINEERING; INTERACTIVE COMPUTER SYSTEMS; RISK ANALYSIS; SECURITY SYSTEMS; UNCERTAINTY ANALYSIS; USER INTERFACES;

CORPORATE POLICIES; SECURITY TOOLS; SYSTEM INTERACTION; USER PROBLEM;

SECURITY OF DATA;

EID: 42149161709     PISSN: 00010782     EISSN: 15577317     Source Type: Journal    
DOI: 10.1145/1330311.1330320     Document Type: Article

References (12)

1. Adams, A. and Sasse, A.S. Users are not the enemy. Commun. ACM 42, (1999) 40-46.
2. Borgida, E., and Nisbett, R.E. The differential impact of abstract vs. concrete information on decisions. J. Applied Social Psychology 7 (1977) 258-271.
3. Dhamija, R., Tygar, J.D., and Hearst, M. Why phishing works. In Proceedings of the SIGCHI Conference on Human Factors in Computing Systems (Montreal, Quebec, Canada, Apr. 22-27, 2006). R. Grinter, T. Rodden, P. Aoki, E. Cutrell, R. Jeffries, and G. Olson, Eds. ACM, New York, 581-590.
4. Downs, J.S., Holbrook, M., and Cranor, L.F. Behavioral response to phishing risk. In Proceedings of the Anti-Phishing Working Groups 2nd Annual Ecrime Researchers Summit (Pittsburgh, PA, Oct. 4-5, 2007). ACM, New York, 37-44.
5. Greenwald, S.J., Olthoff, K.G., Raskin, V., and Ruch, W. The user non-acceptance paradigm: INFOSECs dirty little secret. New Security Paradigms Workshop, 35-43. ACM, New York.
6. Slovic, P., Fischhoff, B., and Lichtenstein, S. Facts versus fears: Understanding perceived risks. Judgment under Uncertainty: Heuristics and Biases. D. Kahneman, P. Slovic, and A. Tversky, eds. Cambridge University Press, New York, 1986, 463-489.
7. Smetters, D.K. and Grinter, R.E. Moving from the design of usable security technologies to the design of useful secure applications. New Security Paradigms Workshop. ACM, New York, 2002, 82-89.
8. Tversky, A. and Kahneman, D. Rational choice and the framing of decisions. J. Business 59 (1986), 251-278.
9. Whitten, A. and Tygar J.D. Why Johnny can't encrypt: A usability evaluation of PGP 5.0. In Proceedings of the 8th USENIX Security Symposium (1999). USENIX Association, Berkeley, CA, 169-184.
10. Wright, P. The harassed decision maker: Timer pressure, distractions, and the use of evidence. J. Applied Psychology 59, (1974), 555-561.
11. Yee, K.P. User interaction design for secure systems. Proceedings of the 4th International Conference on Information and Communications Security. Springer-Verlag, London, 2002.
12. Zurko, M.E. and Simon, R.T. User-centered security. New Security Paradigms Workshop. ACM, New York, 27-33.