Risk perceptions of information security: A measurement study

Proceedings - 12th IEEE International Conference on Computational Science and Engineering, CSE 2009

Volumn 3, Issue , 2009, Pages 462-469

  Farahmand, Fariborz ^a   Dark, Melissa ^a   Liles, Sydney ^a   Sorge, Brandon ^a  

^a PURDUE UNIVERSITY   (United States)

Author keywords

Information security; Privacy; Risk analysis; Risk perception

Indexed keywords

INDIVIDUAL'S PERCEPTION; INFORMATION SECURITY; MAIN CHARACTERISTICS; MEASUREMENT STUDY; ONLINE ENVIRONMENTS; ORDINAL SCALE; PRIVACY; PRIVACY RISKS; USER GROUPS;

COMPUTER PRIVACY; COMPUTER TESTING; FLUORINE CONTAINING POLYMERS; NETWORK SECURITY; RISK ANALYSIS; RISK ASSESSMENT; SAFETY FACTOR;

RISK PERCEPTION;

EID: 70749162072     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSE.2009.449     Document Type: Conference Paper

References (41)

1. A. Acquisti and J. Grossklags, Losses, gains, and hyperbolic discounting: An experimental approach to information security attitudes and behavior, 2nd Annual Workshop on Economics and Information Security-WEIS, 3, 2003.
2. A. Acquisti and J. Grossklags, Privacy and rationality in individual decision making, Security & Privacy Magazine, IEEE, 3(1), 26-33, 2005.
3. L. W. Anderson, A Taxonomy for Learning, Teaching, and Assessing: A Revision of Bloom's Taxonomy of Educational Objectives: Longman, 2001.
4. R. J. Bies, Interactional (ln) Justice: The Sacred and the Profane, Advances in Organizational Justice, 2001.
5. R. J. Bies and J. Moag, Interactional justice: Communication criteria of fairness, Research on negotiation in organizations, 1, 43-55, 1986.
6. H. Bleichrodt, J. M. Abellan-Perinan, J. L. Pinto-Prades, and I. Mendez- Martinez, Resolving Inconsistencies in Utility Measurement Under Risk: Tests of Generalizations of Expected Utility, Management Science, 53(3), 469-482, 2007.
7. B. S. Bloom, D. R. Krathwohl, and B. B. Masia, Taxonomy of Educational Objectives: The Classification of Educational Goals: David McKay, 1956.
8. J. Brockner, Making sense of procedural fairness: How high procedural fairness can reduce or heighten the influence of outcome favorability, The Academy of Management review, 27(1), 58-76, 2002.
9. R. T. Clemen, Making hard decisions: Duxbury Press Belmont, California, 2001.
10. M. J. Culnan and R. J. Bies, Consumer Privacy: Balancing Economic and Justice Considerations, Contemporary Perspectives on Privacy: Social, Psychological, Political, 59(2), 323-342, 2003.
11. F. Farahmand, M. Atallah, B. Konsysnski, "Incentives and Precptions of Information Security Risks, " Proc. of the Twenty Ninth International Conference on Information Systems, Paris, Dec 2008.
12. F. Farahmand, S. B. Navathe, G. P. Sharp, and P. H. Enslow, A Management Perspective on Risk of Security Threats to Information Systems, Information Technology and Management, 6(2), 203-225, 2005.
13. F. Farahmand, S. L. Pfleeger, and E. H. Spafford, Using Trust to Understand Risk Perceptions in Online Environments, 2007.
14. B. Fischoff, P. Slovic, and S. Lichtenstein, Weighing the risks, Which risks are acceptable, Environment, 21(4), 17-20, 1979.
15. B. Fischoff, P. Slovic, S. Lichtenstein, S. Read, and B. Combs, How safe is safe enough? A psychometric study of attitudes towards technological risks and benefits, Policy Sciences, 9(2), 127-152, 1978.
16. R. Folger and J. Greenberg, Procedural justice: An interpretive analysis of personnel systems, Research in Personnel and Human Resources Management, 3, 141-183, 1985.
17. S. Frederick, On the ball: Cognitive reflection and decision-making. Journal of Economic Perspectives, 2005.
18. J. J. Gonzalez and A. Sawicka, The Role of Learning and Risk Perception in Compliance, Proceedings of the 21st International Conference of the System Dynamics Society, New York, 2003.
19. J. Greenberg, A Taxonomy of Organizational Justice Theories, The Academy of Management Review, 12(1), 9-22, 1987.
20. HM Treasury, Managing risks to the public: appraisal guidance, Retrieved from www.hm-treasury.gov.uk 2005.
21. R. A. Howard, Decision Analysis: Practice and Promise, Management Science, 34(6), 679-695, 1988.
22. E. J. Johnson and A. Tversky, Representations of perceptions of risks, Journal of Experimental Psychology: General, 113(1), 55-70, 1984.
23. N. E. Kang, and W. C. Yoon, A cognitive modeling of the user's exploratory behavior with prior knowledge, Proceedings of the 4th international workshop on Task models and diagrams, 35-42, 2005.
24. R. J. Lewicki, D. J. McAllister and R. J. Bies, Trust and Distrust: New Relationships and Realities, The Academy of Management Review, 23(3), 438-458, 1998.
25. E. A. Lind and T. R. Tyler, The social psychology of procedural justice: Plenum Press New York, 1988.
26. M. P. McCarthy, Risk From the CEO and Board Perspective: McGraw- Hill, 2003.
27. B. A. Mellers, A. Schwartz and A. D. J. Cooke, Judgment And Decision Making. Annual Review of Psychology, 49(1), 447-477, 1998.
28. R. E. O'Connor, R. J. Bord, and A. Fisher, Risk Perceptions, General Environmental Beliefs, and Willingness to Address Climate Change. Risk Analysis, 19(3), 461-471, 1999.
29. S. J. Payne, A. Howes and W. R. Reader, Adaptively distributing cognition: a decision-making perspective on human-computer interaction, Behaviour & Information Technology, 20(5), 339-346, 2001.
30. V. E. Rezmierski, D. M. Rothschild, A. S. Kazanis, and R. D. Rivas, Final Reoprt of the Computer Incident Factor Analysis and Categorization (CIFAC) Project Volume I: College and University Sample: University of Michigan, 2005.
31. G. O. Rogers, The Dynamics of Risk Perception: How Does Perceived Risk Respond to Risk Events? Risk Analysis, 17(6), 745-757, 1997.
32. U. Scmidt and H. Zank, Risk Aversion in Cumulative Prospect Theory, Management Science, 54(1), 208-216, 2008.
33. L. Sjöberg, The Allegedly Simple Structure of Experts' Risk Perception: An Urban Legend in Risk Research. Science, Technology, & Human Values, 27(4), 443-459, 2002.
34. P. Slovic, Perception of risk, Science, 236(4799), 280-285, 1987.
35. C. Starr, Social benefit vs. technological risk, Science, 165(1), 232-238, 1969.
36. R. M. Steinberg, M. E. A. Everson, F. J. Martens and L. E. Nottingham, Enterprise Risk Management Integrated Framework Executitive Summary, 2004.
37. G. Stoneburner, A. Goguen and A. Feringa, Risk Management Guide for Information Technology Systems, NIST Special Publication, 800- 830, 2002.
38. C. W. Trumbo, Information Processing and Risk Perception: An Adaptation of the Heuristic-Systematic Model, Journal of Communication, 52(2), 367-382, 2002.
39. A. Tversky and D. Kahneman, Judgment Under Uncertainty: Heuristics and Biases. Science, 185, 1124-1131, 1974.
40. P. P. Wakker, D. R. M. Timmermans, and I. Machielse, The Effects of Statistical Information on Risk-and Ambiguity-Attitudes, and on Rational Insurance Decisions, 2006.
41. D. Kahneman, A. Tversky (1979) "Prospect Theory: An Analysis of Decision under Risk", Econometrica, XLVII (1979), 263-291.