Barriers to Usable Security? Three Organizational Case Studies

Deanna D. Caputo; Shari Lawrence Pfleeger; M. Angela Sasse; Paul Ammann; Jeff Offutt; Lin Deng

doi:10.1109/MSP.2016.95

Barriers to Usable Security? Three Organizational Case Studies

Deanna D. Caputo
, Shari Lawrence Pfleeger
, M. Angela Sasse
, Paul Ammann
, Jeff Offutt
, Lin Deng

Computer Science

University at Albany

MITRE Corporation
Pfleeger Consulting Group
University College London
George Mason University

Research output: Contribution to journal › Article › peer-review

50 Scopus citations

Abstract

Usable security assumes that when security functions are more usable, people are more likely to use them, leading to an improvement in overall security. Existing software design and engineering processes provide little guidance for leveraging this in the development of applications. Three case studies explore organizational attempts to provide usable security products.

Original language	English
Article number	7676139
Pages (from-to)	22-32
Number of pages	11
Journal	IEEE Security and Privacy
Volume	14
Issue number	5
DOIs	https://doi.org/10.1109/MSP.2016.95
State	Published - Sep 1 2016

Keywords

behavioral sciences
case studies
cybersecurity
security
software engineering
usability
usable security

Access to Document

10.1109/MSP.2016.95

Cite this

@article{d3f86414fca44be9b4bc403c323e1161,

title = "Barriers to Usable Security? Three Organizational Case Studies",

abstract = "Usable security assumes that when security functions are more usable, people are more likely to use them, leading to an improvement in overall security. Existing software design and engineering processes provide little guidance for leveraging this in the development of applications. Three case studies explore organizational attempts to provide usable security products.",

keywords = "behavioral sciences, case studies, cybersecurity, security, software engineering, usability, usable security",

author = "Caputo, \{Deanna D.\} and Pfleeger, \{Shari Lawrence\} and Sasse, \{M. Angela\} and Paul Ammann and Jeff Offutt and Lin Deng",

note = "Publisher Copyright: {\textcopyright} 2016 IEEE.",

year = "2016",

month = sep,

day = "1",

doi = "10.1109/MSP.2016.95",

language = "English",

volume = "14",

pages = "22--32",

journal = "IEEE Security and Privacy",

issn = "1540-7993",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

number = "5",

}

TY - JOUR

T1 - Barriers to Usable Security? Three Organizational Case Studies

AU - Caputo, Deanna D.

AU - Pfleeger, Shari Lawrence

AU - Sasse, M. Angela

AU - Ammann, Paul

AU - Offutt, Jeff

AU - Deng, Lin

PY - 2016/9/1

Y1 - 2016/9/1

N2 - Usable security assumes that when security functions are more usable, people are more likely to use them, leading to an improvement in overall security. Existing software design and engineering processes provide little guidance for leveraging this in the development of applications. Three case studies explore organizational attempts to provide usable security products.

AB - Usable security assumes that when security functions are more usable, people are more likely to use them, leading to an improvement in overall security. Existing software design and engineering processes provide little guidance for leveraging this in the development of applications. Three case studies explore organizational attempts to provide usable security products.

KW - behavioral sciences

KW - case studies

KW - cybersecurity

KW - security

KW - software engineering

KW - usability

KW - usable security

UR - https://www.scopus.com/pages/publications/84993929620

U2 - 10.1109/MSP.2016.95

DO - 10.1109/MSP.2016.95

M3 - Article

SN - 1540-7993

VL - 14

SP - 22

EP - 32

JO - IEEE Security and Privacy

JF - IEEE Security and Privacy

IS - 5

M1 - 7676139

ER -

Barriers to Usable Security? Three Organizational Case Studies

Abstract

Keywords

Access to Document

Other files and links

Fingerprint

Cite this