Title
Heuristics and Biases: Implications for Security Design
Abstract
Failures of security technology are often attributed to individual fault. The lack of adoption of privacy enhancing technologies is explained as a societal failure, i.e., that people don't care. Security designers consider the individual user to be rational, certain, and self-optimizing. Thus, academic and practitioner efforts have focused on incentive alignment and education. But even the effectiveness of initiatives such as security education can be improved if well-known human decision heuristics are taken as initial inputs to improve technical solutions, rather than sources of failure to be bemoaned.
Year
DOI
Venue
2013
10.1109/MTS.2013.2241294
Technology and Society Magazine, IEEE
Keywords
Field
DocType
computer science education,data privacy,education,human decision heuristics,incentive alignment,privacy enhancing technology,security design,security education,security technology,societal failure,technical solution
Security convergence,Security through obscurity,Asset (computer security),Computer security,Security engineering,Security service,Cloud computing security,Engineering,Security information and event management,Computer security model
Journal
Volume
Issue
ISSN
32
1
0278-0097
Citations 
PageRank 
References 
3
0.43
0
Authors
2
Name
Order
Citations
PageRank
Vaibhav Garg1969.58
L. Jean Camp252167.06