Title
Rational security: Modelling everyday password use
Abstract
To inform the design of security policy, task models of password behaviour were constructed for different user groups-Computer Scientists, Administrative Staff and Students. These models identified internal and external constraints on user behaviour and the goals for password use within each group. Data were drawn from interviews and diaries of password use. Analyses indicated password security positively correlated with the sensitivity of the task, differences in frequency of password use were related to password security and patterns of password reuse were related to knowledge of security. Modelling revealed Computer Scientists viewed information security as part of their tasks and passwords provided a way of completing their work. By contrast, Admin and Student groups viewed passwords as a cost incurred when accessing the primary task. Differences between the models were related to differences in password security and used to suggest six recommendations for security officers to consider when setting password policy.
Year
DOI
Venue
2012
10.1016/j.ijhcs.2012.02.008
Int. J. Hum.-Comput. Stud.
Keywords
Field
DocType
Password,Security,Task modelling,Rationality
Internet privacy,Password strength,Computer security,Computer science,Password psychology,Information security,One-time password,Password policy,Password,Cognitive password,Logical security
Journal
Volume
Issue
ISSN
70
6
1071-5819
Citations 
PageRank 
References 
16
0.58
34
Authors
3
Name
Order
Citations
PageRank
Geoffrey B. Duggan1846.18
Hilary Johnson254169.57
Beate Grawemeyer318417.60