Usability and Security

More documents

Recommendations

Info

ABSTRACTIn the modern multi-user computer environment, Internet-capable networks provide connectivity thatallows a large portion of the user population to access information from sources around the world.Because of the ease with which information can be accessed, computer security breaches may occur unlesssystems are restricted and information stored therein are kept secure. Breaches of security can have seriousconsequences, including theft of confidential corporate documents, compromise of intellectual property,unauthorized modification of systems and data, denial of service, and others. Considerable research hasbeen conducted on threats to security. Numerous sophisticated security methods have been developed,many of which rely on individuals to implement and use them correctly. Despite the apparent influence ofusability, surprisingly little research has been conducted on the relation between usability and the degreeof security provided by the various information security methods. In this thesis, we review the variousinformation security methods that are used, appraise the usability issues and map the relationship betweenthese two aspects.
ACKNOWLEDGMENTSThis thesis covers the last and third year of the postgraduate program and is based on the work of anExecutive Master in IT Auditing thesis in the Faculty of Economics and Business Administration of theVrije Universiteit Amsterdam.It is a pleasure to thank the many people who made this thesis possible. To start with, we would like tothank our university coach, Evert Koning and our mentor, Guill van den Boom who throughout the thesiswritingperiod provided sound advice and explained things clearly and simply. We would also like tothank our interviewees, Eric Velleman and Martin Wijnmaalen, for their time and good input. Last but notleast we would like to thank Rene Bestebreurtje, for his good teaching, ideas and encouragement.The Hague, March 31 st 2008
Page 1: Usability and SecurityUniversity: V
Page 5 and 6: IntroductionThe developments in Inf
Page 7 and 8: idging the gap between theory and p
Page 9 and 10: 2.1.3 Usability componentsIn order
Page 11 and 12: custom approach 12 . An example of
Page 13: put usability and security amongst
Page 16 and 17: Security aspects:• Confidentialit
Page 18 and 19: ambiguous. Controlled answers offer
Page 20 and 21: 3.3.3 TokensIn this paragraph the t
Page 22 and 23: Security aspects:• Confidentialit
Page 24 and 25: The strengths, weaknesses and usabi
Page 26 and 27: conclude that the most efficient bi
Page 28 and 29: e guessed, which results in a low s
Page 30 and 31: To answer our main research questio
Page 32 and 33: AppendixInterview with Martin Wijnm
Page 34 and 35: Sources1 ISO 9241-11, Part 11: Guid

Usability and Security

Create successful ePaper yourself

Delete template?

Save as template?