Take a look at the new version of this page: [ beta version ]. Tell us what you think.

ABSTRACT

Technological developments and the addition of new features to existing applications or services require the inclusion of security mechanisms to protect the user. When using these mechanisms the user faces a tradeoff between more risky and more efficient or safer and less efficient use of the system. We discuss this tradeoff and present a novel complementary experimental system which provides researchers and corporations the ability to explore and model the usability and security tradeoff in the context of user interaction with security systems and psychological acceptability, even before the actual development and implementation processes have ended.

REFERENCES

• 1: Ben-Asher, N., Meyer, J., Moeller, S. and Englert, R. 2009. An Experimental System for Studying the Tradeoff between Usability and Security. In Proceedings of the 4^th International Conference on Availability, Reliability and Security (Fukuoka, Japan, March 16--19, 2009).
• 2: Cañas, J. J. and Waern, Y., 2005. Cognitive research with microworlds. In Theoretical Issues in Ergonomics Science vol. 6 (1), pp. 1--3.
• 3: Lorrie Faith Cranor, A framework for reasoning about the human in the loop, Proceedings of the 1st Conference on Usability, Psychology, and Security, p.1-15, April 14-14, 2008, San Francisco, California
• 4: Serge Egelman , Lorrie Faith Cranor , Jason Hong, You've been warned: an empirical study of the effectiveness of web browser phishing warnings, Proceeding of the twenty-sixth annual SIGCHI conference on Human factors in computing systems, April 05-10, 2008, Florence, Italy [doi>10.1145/1357054.1357219]
• 5: Gonzalez, J. J. and Sawicka, A., 2002. A Framework for Human Factors in Information Security. In The 2002 WSEAS International Conference on Information Security (ICIS'02) (Barcelona, Spain, December 15--18, 2002).
• 6: Green, D. and Swets, J., 1966. Signal detection theory and psychophysics. New York: John Wiley and Sons.
• 7: Joshua B. Gross , Mary Beth Rosson, Looking for trouble: understanding end-user security management, Proceedings of the 2007 symposium on Computer human interaction for the management of information technology, March 30-31, 2007, Cambridge, Massachusetts [doi>10.1145/1234772.1234786]
• 8: Johnston, J., Eloff, J. H. P., and Labuschagne, L. 2003. Security and human computer interfaces. In Computers&Security, Vol. 22 No. 8, pp. 675--84.
• 9: Neal Leavitt, Mobile Phones: The Next Frontier for Hackers?, Computer, v.38 n.4, p.20-23, April 2005 [doi>10.1109/MC.2005.134]
• 10: Renaud, K. 2005. Evaluating Authentication Mechanisms. Security and Usability, Cranor, L. and Garfinkel, S, ed., O'Reilly.
• 11: Bruce Schneier, Secrets & Lies: Digital Security in a Networked World, John Wiley & Sons, Inc., New York, NY, 2000
• 12: Ryan West, The psychology of security, Communications of the ACM, v.51 n.4, p.34-40, April 2008 [doi>10.1145/1330311.1330320]

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)
          Subjects: Invasive software (e.g., viruses, worms, Trojan horses)

Additional Classification:
  H. Information Systems
  H.1 MODELS AND PRINCIPLES
      H.1.2 User/Machine Systems
          Subjects: Software psychology; Human factors

General Terms:
Experimentation, Human Factors, Security

Keywords:
alerts, experimental system, security, security settings, usability