Lessons from brain age on persuasion for computer security

ABSTRACT

Users generally have difficulty understanding and managing computer security tasks. We examined Nintendo's Brain Age games for ways to help users remember more secure passwords. Instead, we found design elements that encouraged users to continually perform cognitive tasks that would otherwise be tedious. This paper discusses these elements using existing Persuasive Technology principles, and explores how they could be leveraged to make computer security tasks easier and more engaging.

REFERENCES

• 1: Anne Adams , Martina Angela Sasse, Users are not the enemy, Communications of the ACM, v.42 n.12, p.40-46, Dec. 1999 [doi>10.1145/322796.322806]
• 2: Sonia Chiasson , P. C. van Oorschot , Robert Biddle, A usability study and critique of two password managers, Proceedings of the 15th conference on USENIX Security Symposium, p.1, July 31-August 04, 2006, Vancouver, B.C., Canada
• 3: B. J. Fogg , Jonathan Grudin , Jakob Nielsen , Stuart Card, Persuasive Technology: Using Computers to Change What We Think and Do, Science & Technology Books, 2002
• 4: Alain Forget , Sonia Chiasson , Robert Biddle, Lessons from Brain Age on password memorability, Proceedings of the 2008 Conference on Future Play: Research, Play, Share, November 03-05, 2008, Toronto, Ontario, Canada [doi>10.1145/1496984.1497044]
• 5: Alain Forget , Sonia Chiasson , P. C. van Oorschot , Robert Biddle, Improving text passwords through persuasion, Proceedings of the 4th symposium on Usable privacy and security, July 23-25, 2008, Pittsburgh, Pennsylvania [doi>10.1145/1408664.1408666]
• 6: Furnell, S. Why Users Cannot Use Security. Computers & Security 24, 4 (2005).
• 7: Gilleade, K.M., Dix, A., and Allanson, J. Affective Videogames and Modes of Affective Gaming: Assist Me, Challenge Me, Emote Me. In Proc. DIGRA 2005.
• 8: Kawashima, R. Train Your Brain: 60 Days to a Better Brain. Kumon Publishing North America. 2005.
• 9: Alma Whitten , J. D. Tygar, Why Johnny can't encrypt: a usability evaluation of PGP 5.0, Proceedings of the 8th conference on USENIX Security Symposium, p.14-14, August 23-26, 1999, Washington, D.C.
• 10: Ka-Ping Yee, User Interaction Design for Secure Systems, Proceedings of the 4th International Conference on Information and Communications Security, p.278-290, December 09-12, 2002

INDEX TERMS

Primary Classification:
  J. Computer Applications
  J.4 SOCIAL AND BEHAVIORAL SCIENCES
      Subjects: Psychology

Additional Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)
          Subjects: Authentication
  K.8 PERSONAL COMPUTING
      K.8.0 General
          Subjects: Games

General Terms:
Design, Security

Keywords:
authentication, persuasive technology, usable security