The User is not the enemy

Adams, Anne and Sasse, Angela (2005). The User is not the enemy. In: Cranor, Lorrie Faith and Garfinkel, Simson eds. Security and Usability: Designing secure systems that people can use. USA: O’Reilly, pp. 610–630.

URL: http://www.oreilly.com/catalog/securityusability/i...

Abstract

Many system security departments treat users as a security risk to be controlled. The general consensus is that most users are careless and unmotivated when it comes to system security. In a recent study, we found that users may indeed compromise computer security mechanisms, such as password authentication, both knowing and unknowingly. A closer analysis, however, revealed that such behavior is often caused by the way in which security mechanisms are implemented, and users’ lack of knowledge. We argue that to change this state of affairs, security departments need to communicate more with users, and adopt a user-centered design approach.

Viewing alternatives

Item Actions

Export

You can export this page using these formats

About

• Item ORO ID
• 6707
• Item Type
• Book Section
• ISBN
• 0-596-00827-9, 978-0-596-00827-7
• Keywords
• security; usability; organisational security
• Academic Unit or School
• Institute of Educational Technology (IET)
• Research Group
• Centre for Research in Computing (CRC)
  Centre for Research in Education and Educational Technology (CREET)
• Depositing User
• Anne Adams