DMCA
Pretty Good Persuasion: A first step towards effective password security for the Real World (2001)
| Venue: | Proceedings of the New Security Paradigms Workshop, 10-13 September, Cloudcroft, NM |
| Citations: | 76 - 7 self |
BibTeX
@INPROCEEDINGS{Weirich01prettygood,
author = {Dirk Weirich and Martina Angela Sasse},
title = {Pretty Good Persuasion: A first step towards effective password security for the Real World},
booktitle = {Proceedings of the New Security Paradigms Workshop, 10-13 September, Cloudcroft, NM},
year = {2001},
pages = {137--143},
publisher = {ACM Press}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
A, Sasse @ cs. ucl.ac, uk In the past, research on password mechanisms has focussed almost entirely on technical issues. Only in recent years has the security research community acknowledged that user behavior plays a part in many security failures, and that policies alone may not be sufficient to ensure correct behavior. We argue that password mechanisms and their users form a socio-technical system, whose effectiveness relies strongly on users ' willingness to make the extra effort that security-censcious behavior requires. In most organizations, users cannot be forced to comply; rather, they have to be persuaded to do so. Ultimately, the mechanisms themselves, policies, tutorials, training and the general discourse have to be designed with their persuasive power in mind. We present the results of a first study that can guide such persuasive efforts, and describe methods that can be used to persuade users to employ proper password practice. KEYWORDS security, passwords, user-centered design, cognitive task analysis, user training ~ motivation mental models, 1.
Keyphrases
good persuasion real world password mechanism many security failure user training motivation mental model cognitive task analysis socio-technical system extra effort security research community technical issue proper password practice correct behavior first study user behavior user-centered design general discourse effectiveness relies persuasive effort persuasive power sasse c security-censcious behavior recent year keywords security
