Weirich, D; Sasse, MA; (2001) Pretty Good Persuasion: a First Step Towards Effective Password Security in the Real World. In: Raskin, Victor and Greenwald, Steven J, (eds.) Proceedings New Security Paradigms Workshop. (pp. 137 - 143). ACM: USA: New York.

Preview

Text p137-weirich- NSPW2001.pdf Download (715kB)

Abstract

In the past,research on password mechanisms has focussed almost entirely on technical issues. Only in recent years has the security research community acknowledged that user behavior plays a part in many security failures, and that policies alone may not be sufficient to ensure correct behavior. We argue that password mechanisms and their users form a socio-technical system, whose effectiveness relies strongly on users' willingness to make the extra effort that security-censcious behavior requires. In most organizations, users cannot be forced to comply; rather, they have to be persuaded to do so. Ultimately, the mechanisms themselves, policies, tutorials, training and the general discourse have to be designed with their persuasive power in mind. We present the results of a first study that can guide such persuasive efforts, and describe methods that can be used to persuade users to employ proper password practice.

Download activity - last month

Export as JSONCSVXML

Download activity - last 12 months

Export as XMLCSVJSON

Downloads by country - last 12 months

Export as XMLCSVJSON

Archive Staff Only

View Item