The user non-acceptance paradigm: INFOSEC's dirty little secret

(by Victor Raskin) This panel will address users’ perceptions and misperceptions of the risk/benefit and benefit/nuisance ratios associated with information security products, and will grope for a solution, based on the psychology of personality trait-factoring results, among other multidisciplinary approaches, to the problem of user non-acceptance of information security products. This problem has acquired a much more scientific guise when amalgamated with the psychology of personality and reinforced by reflections from the field on patterns of user behavior. A gross simplification of the main thrust of the panel is this thesis: if we start profiling the defenders rather than the offenders and do it on the basis of real science rather than very crude personality tests, then we will, at the very least, understand what is happening and possibly create a desirable profile for sysadmins, CIOs, and perhaps even CFOs. This swept-under-the-rug problem is information security’s “dirty l...

• Type: Conference
• Year: 2004
• Where: NSPW
• Authors: Steven J. Greenwald, Kenneth G. Olthoff, Victor Raskin, Willibald Ruch
• Keywords: Crude Personality Tests, Information Security Products, NSPW 2004, Victor Raskin