The Weakest Link: A Psychological Perspective on Why Users Make Poor Security Decisions

View Sample PDF

Author(s): Ryan West (Dell, Inc., USA), Christopher Mayhorn (North Carolina State University, USA), Jefferson Hardee (North Carolina State University, USA)and Jeremy Mendel (North Carolina State University, USA)
Copyright: 2009
Pages: 18
Source title: Social and Human Elements of Information Security: Emerging Trends and Countermeasures
Source Author(s)/Editor(s): Manish Gupta (State University of New York, USA)and Raj Sharman (State University of New York, USA)
DOI: 10.4018/978-1-60566-036-3.ch004

Keywords: Information Science Reference / Information Security & Privacy / IT Security and Ethics / Security & Forensics

Purchase

View The Weakest Link: A Psychological Perspective on Why Users Make Poor Security Decisions on the publisher's website for pricing and purchasing information.

Abstract

The goal of this chapter is to raise awareness of cognitive and human factors issues that influence user behavior when interacting with systems and making decisions with security consequences. This chapter is organized around case studies of computer security incidents and known threats. For each case study, we provide an analysis of the human factors involved based on a system model approach composed of three parts: the user, the technology, and the environment. Each analysis discusses how the user interacted with the technology within the context of the environment to actively contribute to the incident. Using this approach, we introduce key concepts from human factors research and discuss them within the context of computer security. With a fundamental understanding of the causes that lead users to make poor security decisions and take risky actions, we hope designers of security systems are better equipped to mitigate those risks.

The IRMA Community

Research IRM

The Weakest Link: A Psychological Perspective on Why Users Make Poor Security Decisions

Purchase

Abstract

Related Content

IRMA Sponsors