Influencing mental models of security: A research agenda

Proceedings New Security Paradigms Workshop

Volumn , Issue , 2011, Pages 57-66

  Wash, Rick ^a   Rader, Emilee ^a  

^a MICHIGAN STATE UNIVERSITY   (United States)

Author keywords

home computer security; mental models

Indexed keywords

COMPUTER USERS; EMAIL MESSAGES; INTERNET CONNECTION; MENTAL MODEL; NON-TECHNICAL USERS; RESEARCH AGENDA;

INTERNET; SECURITY SYSTEMS;

SECURITY OF DATA;

EID: 84855674771     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2073276.2073283     Document Type: Conference Paper

References (48)

1. ADAMS, A., AND SASSE, M. Users are not the enemy. Communications of the ACM 42, 12 (1999), 46.
2. ALBRECHTSEN, E., AND HOVDEN, J. Improving information security awareness and behaviour through dialogue, participation and collective reection. An intervention study. Computers & Security 29, 4 (June 2010), 432-445.
3. ANDERSON, C. Practicing Safe Computing: A Multimethod Empirical Examination of Home Computer User Security Behavioral Intentions. Citeseer 34, 3 (2010), 613-643.
4. ASGHARPOUR, F., LIU, D., AND CAMP, L. Mental models of computer security risks. In Workshop on the Economics of Information Security (WEIS) (2007), Citeseer.
5. Baumeister, R. F., Zhang, L., and Vohs, K. D. Gossip as Cultural Learning. Review of General Psychology 8, 2 (2004), 111-121. (Pubitemid 38782778)
6. BOSTROM, A. Lead is like mercury: risk comparisons, analogies and mental models. Journal of Risk Research 11, 1 (Jan. 2008), 99-117.
7. BRUNER, J. The narrative construction of reality. Critical inquiry 18, 1 (1991), 1-21.
8. CAMP, L. Mental models of privacy and security. Technology and Society Magazine, IEEE 28, 3 (2009), 37-46.
9. CARRICO, A. R., AND RIEMER, M. Motivating energy conservation in the workplace: An evaluation of the use of group-level feedback and peer education. Journal of Environmental Psychology (Nov. 2010).
10. CENSUS, U. Current Population Survey,Computer Use and Ownership supplement, 2009.
11. CRANOR, L. F. A Framework for Reasoning About the Human in the Loop. In Proceedings of the 1st Conference on Usability, Psychology, and Security (UPSec) (2008).
12. D'ANDRADE, R. The Development of Cognitive Anthropology. Cambridge University Press, 2005.
13. DOHERTY, N. F., ANASTASAKIS, L., AND FULFORD, H. The information security policy unpacked: A critical study of the content of university policies. International Journal of Information Management 29, 6 (Dec. 2009), 449-457.
14. DOURISH, P., GRINTER, R. E., DELGADO DE LAFLOR, J., AND JOSEPH, M. Security in the wild: user strategies for managing security as an everyday, practical problem. Personal and Ubiquitous Computing 8, 6 (Sept. 2004), 391-401.
15. FURNELL, S., BRYANT, P., AND PHIPPEN, A.Assessing the security perceptions of personal Internet users. Computers & Security 26, 5 (Aug. 2007), 410-417.
16. GOLDSTEIN, N. J., CIALDINI, R. B., AND GRISKEVICIUS, V. A Room with a Viewpoint: Using Social Norms to Motivate Environmental Conservation in Hotels. Journal of Consumer Research 35, 3 (2008), 472-482.
17. GRINTER, R., EDWARDS, W., NEWMAN, M., AND DUCHENEAUT, N. The Work to Make a Home Network Work. In ECSCW 2005 (2005), Springer, pp. 469-488.
18. GROSS, J., AND ROSSON, M. Looking for Trouble: Understanding End-User Security Management. In Proceedings of the 2007 Symposium on Computer Human interaction For the Management of information Technology (2007), pp. 30-31.
19. HEATH, C., BELL, C., AND STEINBERG, E. Emotional Selection in Memes: The Case of Urban Legends. Journal of Personality 81, 6 (2001), 1028-1041.
20. HERLEY, C. So Long, And No Thanks for the Externalities: The Rational Rejection of Security Advice by Users. In NSPW '09 Proceedings of the 2009 workshop on New security paradigms workshop (2009).
21. HSU, Y. The effects of metaphors on novice and expert learners' performance and mental-model development. Interacting with Computers 18, 4 (July 2006), 770-792.
22. JOHNSON-LAIRD, P., GIROTTO, V., AND LEGRENZI, P. Mental Models: A Gentle Guide for Outsiders, 1998.
23. JOHNSON-LAIRD, P. N. Inaugural Article: Mental models and human reasoning. Proceedings of the National Academy of Sciences 2010 (Oct. 2010).
24. JOHNSTON, A. Fear Appeals and Information Security Behaviors: An Empirical Study. MIS Quarterly 34, 3 (2010), 549-566.
25. JONES, N. A., ROSS, H., LYNAM, T., PEREZ, P., AND LEITCH, A. Mental Models: An Interdisciplinary Synthesis of Theory and Methods. Ecology And Society 16, 1 (2011).
26. KEIL, F. C. The Feasibility of Folk Science. Cognitive science 34, 5 (May 2010), 826-862.
27. KEMPTON, W. Two Theories of Home Heat Control. Cognitive Science 10, 1 (1986), 75-90.
28. KUMAR, N., MOHAN, K., AND HOLOWCZAK, R. Locking the door but leaving the computer vulnerable: Factors inhibiting home users' adoption of software rewalls. Decision Support Systems 46, 1 (Dec. 2008), 254-264.
29. MAS-COLELL, A., WHINSTON, M. D., AND GREEN, J. R. Microeconomic Theory. Oxford University Press, 1995, ch. 11 Externalities and Public Goods, pp. 350-382.
30. MAZZOCCO, P., GREEN, M., AND BROCK, T. The Effects of a Prior Story-Bank on the Processing of a Related Narrative. Media Psychology 10, 1 (2007), 64-90.
31. MCANDREW, F. T., AND MILENKOVIC, M. A. Of Tabloids and Family Secrets: The Evolutionary Psychology of Gossip. Journal of Applied Social Psychology 32, 5 (May 2002), 1064-1082.
32. MEDIN, D. L., ROSS, N. O., ATRAN, S., COX, D., COLEY, J., PROFFITT, J. B., AND BLOK, S. Folkbiology of freshwater fish. Cognition 99 (2006), 237-273.
33. MICROSOFT. The latest in computer security, 2010. http://www.microsoft. com/security/default.aspx.
34. MICROSOFT. Security bulletin advance notification, 2010. http://www.microsoft.com/technet/ security/Bulletin/advance.mspx.
35. NCSA-Norton-Symantec Online Safety Study, 2010. http://www. staysafeonline.org/blog/ ncsanorton-symantec-online-safety-study-released-today.
36. NIXON, H., AND SAPHORES, J.-D. Information and the decision to recycle: results from a survey of US households. Journal of Environmental Planning and Management 52, 2 (Mar. 2009), 257-277.
37. PETERS, K., KASHIMA, Y., AND CLARK, A. Talking about others: Emotionality and the dissemination of social information. European Journal of Social Psychology 39, 2 (2009), 207-222.
38. ROWE, B., AND WOOD, D. How the Public Views Strategies Designed to Reduce the Threat of Botnets. Trust and Trustworthy Computing 6101, May 2009 (2010), 337-351.
39. SCHÖBEL, M., AND MANZEY, D. Subjective theories of organizing and learning from events. Safety Science 49, 1 (Jan. 2011), 47-54.
40. SIMON, H. A. Rational choice and the structure of the environment. Psychological Review 63, 2 (1956), 129-138.
41. STEG, L. Promoting household energy conservation. Energy Policy 36, 12 (Dec. 2008), 4449-4453.
42. Symantec Internet Security Threat Report: Trends for January 06-June 06, 2006. http://www.symantec.com/specprog/threatreport/ent-whitepaper-symantec- internet-security- threat-report-x-09-2006.en-us.pdf.
43. UTHER, M., AND HALEY, H. Back vs. stack: training the correct mental model affects web browsing. Behaviour & Information Technology 27, 3 (May 2008), 211-218.
44. WASH, R. Folk models of home computer security. In Proceedings of the Sixth Symposium on Usable Privacy and Security (2010), ACM, pp. 1-16.
45. WASH, R., AND LAMPE, C. The Power of the Ask in Social Media. Tech. rep., Michigan State University, 2010.
46. WESTBROOK, L. Mental models: a theoretical overview and preliminary study. Journal of Information Science 32, 6 (2006), 563.
47. WORKMAN, M., BOMMER, W., AND STRAUB, D.Security lapses and the omission of information security measures: A threat control model and empirical test. Computers in Human Behavior 24, 6 (Sept. 2008), 2799-2816.
48. ZURKO, M. E. User-centered security: Stepping up to the grand challenge. In Proceedings of Annual Computer Security Applications Conference (ACSAC) (December 2005).