Leading the Convoy: What Happens When They Know What They're Doing?

Submitted by Anonymous on

ABSTRACT

In an increasingly technological environment, security-critical and safety-critical situations often give a system operator information from both human and automated sources simultaneously.

This study was conducted to understand the personal characteristics and situational variables that affect reliance on human or automated decision aids, when the decision aids are in conflict.

Flawed Mental Models Lead to Bad Cyber Security Decisions: Let’s Do a Better Job

ABSTRACT

Conventional computer security wisdom implicitly assumes models about humans and human organizations such as:

  • Only bad people circumvent security controls. (Corollary: good users never share passwords.)
  • It’s actually possible for organizations to create and maintain a perfect electronic representation of the access control policies they need.

These models then translate into practices that conventional wisdom blesses as good. For just two examples:

Subscribe to