Circumvention of security: Good users do bad things

IEEE Security and Privacy

Volumn 11, Issue 5, 2013, Pages 80-83

  Blythe, Jim ^a   Koppel, Ross ^b   Smith, Sean W ^c  

^a UNIVERSITY OF SOUTHERN CALIFORNIA   (United States)

^b UNIVERSITY OF PENNSYLVANIA   (United States)

^c DARTMOUTH COLLEGE   (United States)

Author keywords

circumvention; HCISEC; usability

Indexed keywords

CIRCUMVENTION; HCISEC; USABILITY;

ELECTRICAL ENGINEERING;

COMPUTER NETWORKS;

EID: 84886560255     PISSN: 15407993     EISSN: None     Source Type: Journal    
DOI: 10.1109/MSP.2013.110     Document Type: Article

References (11)

1. Security and Usability, L.F. Cranor and S. Garfinkel, eds., O'Reilly, 2005.
2. C. Sinsky et al., Comparative User Experiences of Health IT Products: How User Experiences Would Be Reported and Used, Inst. Medicine of the Nat'l Academies, 2012.
3. A. Beautement, M.A. Sasse, and M. Wonham, "The Compliance Budget: Managing Security Behaviour in Organisations," Proc. 2008 New Security Paradigms Workshop, ACM, 2008, pp. 47-58.
4. E. Felten, "Too Stupid to Look the Other Way," Freedom to Tinker, 29 Oct. 2002; https://freedom-to-tinker.com/blog/felten/too-stupid-look- other-way.
5. M. Harrison, R. Koppel, and S. Bar-Lev, "Unintended Consequences of Information Technologies in Health Care-An Interactive Sociotechnical Analysis," J. Am Medical Informatics Assoc., vol. 14, no. 5, 2007, pp. 542-549. (Pubitemid 47379560)
6. C. Herley, "So Long, and No Thanks for the Externalities: The Rational Rejection of Security Advice by Users," Proc. New Security Paradigms Workshop, ACM, 2009, pp. 133-144.
7. P. Inglesant and M.A. Sasse, "The True Cost of Unusable Password Policies: Password Use in the Wild," Proc. SIGCHI Conf. Human Factors in Computing Systems, ACM, 2010, pp. 383-392.
8. B.J. Jansen, A. Spink, and T. Saracevic, "Real Life, Real Users, and Real Needs: A Study and Analysis of User Queries on the Web," Information Processing & Management, vol. 36, no. 2, 2000, pp. 207-227. (Pubitemid 30550546)
9. R. Koppel et al., "Workarounds to Barcode Medication Administration Systems: Their Occurrences, Causes, and Threats to Patient Safety," J. Am Medical Informatics Assoc., vol. 15, no. 4, 2008, pp. 408-423. (Pubitemid 351885162)
10. S. Sinclair and S.W. Smith, "What's Wrong with Access Control in the Real World," IEEE Security & Privacy, vol. 8, no. 4, 2010, pp. 74-77.
11. S.W. Smith and R. Koppel, "Healthcare Information Technology's Relativity Problems: A Typology of How Patients' Physical Reality, Clinicians' Mental Models, and Healthcare Information Technology Differ," J. Am. Medical Informatics Assoc., 2013; doi:10.1136/amiajnl-2012-001419.