Computer security impaired by legitimate users

DMCA

Computer security impaired by legitimate users (2004)

Cached

Download Links

Other Repositories/Bibliography

DBLP

by Denis Besnard , Budi Arief

Venue:	Computers & Security
Citations:	45 - 1 self

BibTeX

@ARTICLE{Besnard04computersecurity,
    author = {Denis Besnard and Budi Arief},
    title = {Computer security impaired by legitimate users},
    journal = {Computers & Security},
    year = {2004},
    pages = {253--264}
}

OpenURL

Abstract

Abstract. Computer security has traditionally been assessed from a technical point of view. One other view is about the role played by legitimate users of systems in impairing the level of protection. In order to address this issue, we wish to adopt a multidisciplinary standpoint and investigate some of the human aspects involved in computer security. From research in psychology, it is known that people make biased decisions. They sometimes overlook rules in order to gain maximum benefits for the cost of a given action. This situation leads to insidious security lapses whereby the level of protection is traded-off against usability. In this paper, we highlight the cognitive processes underlying such security impairments. At the end of the paper, we propose a short usability-centered set of recommendations.

Keyphrases

computer security legitimate user security impairment insidious security lapse cognitive process maximum benefit short usability-centered set human aspect biased decision technical point multidisciplinary standpoint

DMCA