Users are not the enemy

Adams, Anne; Sasse, M. Angela

doi:10.1145/322796.322806

Cited by 1,083 publications

(732 citation statements)

References 1 publication

Supporting

Mentioning

674

Contrasting

Unclassified

Order By: Relevance

“…Definition H1 1 Higher levels of education result in higher levels of computer usage. H1 2 Higher levels of education result in higher levels of awareness in computer security in general. H1 3 Higher levels of education result in higher levels of awareness for security in computer usage routines.…”

Section: Computer Usage and Securitymentioning

confidence: 99%

“…Since security mechanisms are designed, implemented, applied and, at the same time, breached by people, human factors should be considered in their design [2]. As technology endeavours to build its best protection mechanisms in computer and communication security, reported incidents of security breaches each year are still on a constant rise.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Impact of education on security practices in ICT

Bostan

2015

Teh. vjesn.

View full text Add to dashboard Cite

Original scientific paperIn assuring the security in information technology, user awareness and acquired-user habits are inevitable components, yet they may be qualified as the feeblest ones. As the information technology tries to put its best in providing maximum security, user awareness plays a key-role. Additionally, although the literature provides studies on approaches for teaching information security, there are not many evidences on the impact of education level. Therefore, this study investigates the impact of the education level on user security awareness in using the Information and Communication Technology (ICT) products. For this purpose, a survey was conducted among 433 citizens from different layers of the society. Interestingly, the results indicated that education level has significant impact on all security issues included in the analysis regarding computer usage, web usage and e-mail usage. Keywords: Education and ICT security awareness, Education and ICT usage, E-mail security, Computer security, Web security Utjecaj obrazovanja na sigurnosne mjere u ICTIzvorni znanstveni članak U provođenju sigurnosnih mjera u informatičkoj tehnologiji, svijest i stečene radne navike korisnika neizbježne su komponente. Ipak, može ih se označiti i kao najslabije. Premda informatička tehnologija nastoji činiti najviše što može da bi osigurala maksimum sigurnosti, svijest korisnika o tome je ključna. Uz to, iako se u literaturi mogu naći radovi koji se bave načinima podučavanja sigurnosti u informatici, nema ih mnogo koji razmatraju utjecaj stupnja obrazovanja. Stoga se u ovom radu ispituje utjecaj stupnja obrazovanja na to koliko su korisnici svjesni potrebe primjene zaštitnih mjera pri korištenju proizvoda informatičke i komunikacijske tehnologije (ICT). U tu je svrhu provedeno ispitivanje na grupi od 433 građana, pripadnika raznih društvenih slojeva. Zanimljivo je da su rezultati pokazali kako nivo obrazovanja značajno utječe na pitanja vezana uz provođenje zaštitnih mjera kad se radi o uporabi računala, internetske mreže i e-pošte.

show abstract

Section: Computer Usage and Securitymentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Impact of education on security practices in ICT

Bostan

2015

Teh. vjesn.

View full text Add to dashboard Cite

show abstract

“…As users often hold inaccurate notions of security and of the importance of security measures [1,10], the stated security benefits need to be reconciled with the benefits that end users perceive Pico to offer. However, without a working implementation and more importantly without compatible services to log in to, validating these benefits would be tricky.…”

Section: Facilitating Conditionsmentioning

confidence: 99%

“…Their inadequacy in terms of both usability and security has been repeatedly pointed out [1,4]. As people must now handle dozens of accounts, passwords are a solution that can no longer scale.…”

Section: Introductionmentioning

confidence: 99%

“…Pico [11], which we briefly describe in Section 2, is our ambitious long-term project to replace passwords with a more usable and more secure system that will not require you to memorize any secrets 1 . In its quest to explore the entire solution space for the best possible solution in terms of usability and security, Pico is a clean-slate redesign that explicitly gives up on compatibility with passwords.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Bootstrapping Adoption of the Pico Password Replacement System

Stajano

Jenkinson

Payne

et al. 2014

Security Protocols XXII

View full text Add to dashboard Cite

Abstract. In previous work we presented Pico, an authentication system designed to be both more usable and more secure than passwords. One unsolved problem was that Pico, in its quest to explore the whole solution space without being bound by compatibility shackles, requires changes at both the prover and the verifier, which makes it hard to convince anyone to adopt it: users won't buy an authentication gadget that doesn't let them log into anything and service providers won't support a system that no users are equipped to log in with. In this paper we present three measures to break this vicious circle, starting with the "Pico Lens" browser add-on that rewrites websites on the fly so that they appear Pico-enabled. Our add-on offers the user most (though not all) of the usability and security benefits of Pico, thus fostering adoption from users even before service providers are on board. This will enable Pico to build up a user base. We also developed a server-side Wordpress plugin which can serve both as a reference example and as a useful enabler in its own right (as Wordpress is one of the leading content management platforms on the web). Finally, we developed a software version of the Pico client running on a smartphone, the Pico App, so that people can try out Pico (at the price of slightly reduced security) without having to acquire and carry another gadget. Having broken the vicious circle we'll be in a stronger position to persuade providers to offer support for Pico in parallel with passwords.

show abstract

Cyber Security Technology Usability and Management

Smetters

2008

Wiley Handbook of Science and Technology for Homeland Security

View full text Add to dashboard Cite

show abstract