Mental models of privacy and security

IEEE Technology and Society Magazine

Volumn 28, Issue 3, 2009, Pages 37-46

  Camp, L Jean ^a  

^a NONE

Author keywords

Biological system modeling; Cognitive science; Computational modeling; Computer security; Grippers; Hospitals

Indexed keywords

BIOLOGICAL SYSTEM MODELING; COGNITIVE SCIENCE; COMPUTATIONAL MODELING; COMPUTER SECURITY; MENTAL MODEL; PRIVACY AND SECURITY; RISK COMMUNICATION; SECURITY AND PRIVACY; SECURITY COMMUNICATION; SECURITY RESEARCH; SECURITY TOOLS; TOOLS AND TECHNIQUES;

BIOLOGICAL SYSTEMS; GRIPPERS; HOSPITALS; RISK ANALYSIS; RISK MANAGEMENT; SECURITY SYSTEMS;

SECURITY OF DATA;

EID: 70350230128     PISSN: 02780097     EISSN: None     Source Type: Journal    
DOI: 10.1109/MTS.2009.934142     Document Type: Article

References (35)

1. R. Anderson, "Unsettling parallels between security and the environment," in Proc. Inaugural Workshop on Economics and Information Security, Berkeley, CA, 2002.
2. R. Anderson, Security Engineering: A Guide to Building Dependable Distributed Systems. New York, NY: Wiley, 2001.
3. M. Bailey, E. Cooke, F. Jahanian, D. Watson, and J. Nazario, "The blaster worm: Then and now." IEEE Security and Privacy, vol. 3, no. 4, pp. 26-31, Jul. 2005; http://dx.doi.org/10.1109/MSP.2005.106.
4. M. Bishop, Computer Security: Art and Science. Pearson, 2003.
5. B. Blakley, E. McDermott, and D. Geer, "Information security is information risk management," in Proc. 2001 Workshop on New Security Paradigms. New York, NY: ACM, 2001, pp. 97-104.
6. L.J. Camp and C. Wolfram, "Pricing security," in Proc. CERT Information Survivability Workshop (Boston, MA), Oct. 24-26, 2000, pp. 31-39.
7. L.J. Camp, Trust and Risk in Internet Commerce. Cambridge, MA: M.I.T. Press, 2000.
8. L.J. Camp and S. Lewis, Eds., The Economics of Information Security Boston, MA: Kluwer, 2004.
9. S. Cass, "Listening in," IEEE Spectrum (Special Report on Intelligence and Technology), vol. 40, no. 4, pp. 32-37, 1995.
10. D. Denning, "Cyberplagues," in Information Warfare and Security. Boston, MA: Addison-Wesley, 1998, ch 10, pp. 269-282.
11. D. Denning, Cryptography and Data Security. Boston, MA: Addison-Wesley, 1982.
12. P. Dourish, R. Grinter, J. Delgado de la Flor, and M. Joseph, "Security in the wild," Personal and Ubiquitous Computing, vol. 8, no. 6, pp. 391-401, 2004.
13. S. Freeman and J. Bleifuss, Was the 2004 Presidential Election Stolen?: Exit Polls, Election Fraud, and the Official Count. St. Paul, MN: Stories Press, 2006.
14. S.J. Greenwald, K.G. Olthoff, V. Raskin, and W. Ruch, "The user non-acceptance paradigm: INFOSEC's dirty little secret," in Proc. 2004 Workshop on New Security Paradigms (Nova Scotia, Canada), Sept. 20-23, 2004.
15. Staff writer, "Mothers of fallen NW Indiana soldiers mourn as toll passes 1000," Bloomington Herald-Tribune, Sept. 8, 2004, pp. A1.
16. H. Jungermann, H. Schutz, and M. Thuring, "Mental models in risk assessment: Informing people about drugs," Risk Analysis, vol. 8, no. 1, pp. 147-155, 1998.
17. D. Kahneman, P. Slovic, and A. Tversky, Judgment Under Uncertainty Cambridge, U.K.: Cambridge Univ. Press, 2001.
18. R. Kephart and W. Chess, "Computer networks as biological systems," IEEE Spectrum, May 1993.
19. M.G. Morgan, B. Fischhoff, A. Bostrom, and C.J. Atman, Risk Communication: A Mental Models Approach. Cambridge, U.K.: Cambridge Univ. Press, 2001.
20. A. Newell and H. Simon, Human Problem Solving. Englewood Cliffs, NJ: Prentice-Hall, 1972.
21. Pew Internet & American Life Project, "Fear of Online Crime," 2001; http://www.pewinternet.org/PPF /r/32/report_display.asp, accessed Nov. 2005.
22. Pew Internet & American Life Project, "America's Online Pursuits," 2003; http://www.pewinternet.org /PPF/r/106/report_display.asp, accessed Nov. 2005.
23. H. Nissenbaum, "Where computer security meets national security," Ethics and Information Technology, vol. 7, no. 2, pp. 61-73, June 2005.
24. B. Schneier, Beyond Fear. New York, NY: Copernicus, 2003.
25. M. Smith, "Melissa was 'a colossal mistake' says author," Sophos: Anti Virus for Business, May 2, 2002; http://www.sophos.com/virusinfo /articles/melissa2.html.
26. C. Stoll, Cuckoo's Egg. New York, NY: Pocket Books, 1990.
27. N.B. Sukhai, "Hacking and cybercrime," in Proc. 1st Ann. Conf. Information Security Curriculum Development (Kennesaw, GA), Oct. 08, 2004. New York, NY: ACM, pp. 128-132.
28. P. Syverson and A. Shostack, "The paradoxical value of privacy," in The Economics of Information Security, J.L. Camp and S. Lewis, Eds. Boston, MA: Kluwer, 2004.
29. H. Varian, "System reliability and free riding," in The Economics of Information Security, J.L. Camp and S. Lewis, Eds. Boston, MA: Kluwer, 2002.
30. V. Tuesday, "Anatomy of an attack: A race against time," Computerworld, vol. 35, no. 12, p. 57, May 19, 2001.
31. A. Tversky and D. Kahneman, "Judgment under uncertainty: Heuristics and biases," Science, vol. 185, pp. 1124-1131, 1974.
32. A. Tversky and D. Kahneman, "Belief in the law of small numbers," Psychological Bulletin, vol. 76, pp. 105-110, 1971.
33. A. Tversky and D. Kahneman, "The framing of decisions and the psychology of choice," Science, vol. 211, no. 4481, pp. 453-8, 1981.
34. D. Verton, The Hacker Diaries: Confessions of Teenage Hackers. Osborne/McGraw-Hill. 2002.
35. P. Wallich, "Getting the message," IEEE Spectrum (Special Report on Intelligence and Technology), vol. 40, no. 4, pp. 38-43. 1995.