Can we make people value IT security?

Duration: 1 hour 16 mins

Share this media item:

Embed this media item:

<iframe width="_width_" height="_height_" src="https://sms.cam.ac.uk/media/2499629/embed" frameborder="0" scrolling="no" allowfullscreen></iframe>

Choose size:

About this item

Available Formats

About this item

Can we make people value IT security?'s image

Description:	A discussion around some of the human factors and usability issues in the security of computer systems.


Created:	2017-09-26 12:08
Collection:	Annual Wheeler lectures
Publisher:	University of Cambridge
Copyright:	Dr. Angela Sasse
Language:	eng (English)
Keywords:	Computer Security; Human Computer Interaction; Usability;


Abstract:	In many organisations today, IT security is a battleground: to manage the risks the organisation faces, security specialists devise policies and deploy security mechanisms that they expect staff and customers to comply with. But most of time, staff and customers don’t comply, and attempts to change that by “raising awareness” and “educating” them generally fail. The talk will use the examples of security warnings, access control, and sandboxing to explain the different perspectives and values that security specialists and ‘the rest of us’ apply to security. In conclusion, I will argue that a value-centred design approach is the only way to develop security solutions people want to use.

Abstract:

In many organisations today, IT security is a battleground: to manage the risks the organisation faces, security specialists devise policies and deploy security mechanisms that they expect staff and customers to comply with. But most of time, staff and customers don’t comply, and attempts to change that by “raising awareness” and “educating” them generally fail. The talk will use the examples of security warnings, access control, and sandboxing to explain the different perspectives and values that security specialists and ‘the rest of us’ apply to security. In conclusion, I will argue that a value-centred design approach is the only way to develop security solutions people want to use.

Available Formats

Format	Quality	Bitrate	Size
MPEG-4 Video	640x360	1.08 Mbits/sec	616.03 MB	View
WebM	640x360	339.7 kbits/sec	189.09 MB	View
iPod Video	480x270	493.73 kbits/sec	274.83 MB	View
MP3	44100 Hz	250.21 kbits/sec	139.28 MB	Listen
Auto *	(Allows browser to choose a format it supports)