Sasse, MA; Brostoff, S; Weirich, D; (2001) Transforming the 'weakest link' - a human/computer interaction approach to usable and effective security. BT Technology Journal , 19 (3) 122 - 131. 10.1023/A:1011902718709.

Preview

PDF BTTJSECv5.pdf Available under License : See the attached licence file. Download (105kB)

Abstract

The security research community has recently recognised that user behaviour plays a part in many security failures, and it has become common to refer to users as the 'weakest link in the security chain'. We argue that simply blaming users will not lead to more effective security systems. Security designers must identify the causes of undesirable user behaviour, and address these to design effective security systems. We present examples of how undesirable user behaviour with passwords can be caused by failure to recognise the characteristics of human memory, unattainable or conflicting task demands, and lack of support, training and motivation. We conclude that existing human/computer interaction knowledge and techniques can be used to prevent or address these problems, and outline a vision of a holistic design approach for usable and effective security.

Download activity - last month

Export as CSVXMLJSON

Download activity - last 12 months

Export as JSONXMLCSV

Downloads by country - last 12 months

Export as JSONCSVXML

Archive Staff Only

View Item