Relationships between password choices, perceptions of risk and security expertise

Sadie Creese; Duncan Hodges; Sue Jamison-Powell; Monica Whitty

doi:10.1007/978-3-642-39345-7_9

Relationships between password choices, perceptions of risk and security expertise

Sadie Creese, Duncan Hodges, Sue Jamison-Powell, Monica Whitty

Research output: Chapter in Book/Report/Conference proceeding › Conference Paper › Research › peer-review

21 Citations (Scopus)

Abstract

'Despite technological advances, humans remain the weakest link in Internet security' [1], this weakness is typically characterised in one of two domains. First, systems may not enable humans to interface securely, or the security mechanisms themselves are unusable or difficult to use effectively. Second, there may be something fundamental about the behaviour of some people which leads them to become vulnerable. This paper examines the links between perceptions of risk associated with online tasks and password choice. We also explore the degrees to which the said perceptions of risk differ according to whether the password user is a security expert or not, and whether they have experienced some form of attack.

Original language	English
Title of host publication	Human Aspects of Information Security, Privacy, and Trust - First International Conference, HAS 2013, Held as Part of HCI International 2013, Proceedings
Publisher	Springer-Verlag London Ltd.
Pages	80-89
Number of pages	10
ISBN (Print)	9783642393440
DOIs	https://doi.org/10.1007/978-3-642-39345-7_9
Publication status	Published - 2013
Externally published	Yes
Event	International Conference on Human Aspects of Information Security, Privacy, and Trust 2013 - Las Vegas, United States of America Duration: 21 Jul 2013 → 26 Jul 2013 Conference number: 1st https://link.springer.com/chapter/10.1007/978-3-642-39345-7_9

Publication series

Name	Lecture Notes in Computer Science
Publisher	Springer
Volume	8030
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	International Conference on Human Aspects of Information Security, Privacy, and Trust 2013
Abbreviated title	HCI 2013
Country/Territory	United States of America
City	Las Vegas
Period	21/07/13 → 26/07/13
Internet address	https://link.springer.com/chapter/10.1007/978-3-642-39345-7_9

Access to Document

10.1007/978-3-642-39345-7_9

Cite this

Creese, S., Hodges, D., Jamison-Powell, S., & Whitty, M. (2013). Relationships between password choices, perceptions of risk and security expertise. In Human Aspects of Information Security, Privacy, and Trust - First International Conference, HAS 2013, Held as Part of HCI International 2013, Proceedings (pp. 80-89). (Lecture Notes in Computer Science; Vol. 8030). Springer-Verlag London Ltd.. https://doi.org/10.1007/978-3-642-39345-7_9

Creese, Sadie ; Hodges, Duncan ; Jamison-Powell, Sue et al. / Relationships between password choices, perceptions of risk and security expertise. Human Aspects of Information Security, Privacy, and Trust - First International Conference, HAS 2013, Held as Part of HCI International 2013, Proceedings. Springer-Verlag London Ltd., 2013. pp. 80-89 (Lecture Notes in Computer Science).

@inproceedings{8d1da0bb454f46e38ea43326c4edad55,

title = "Relationships between password choices, perceptions of risk and security expertise",

abstract = "'Despite technological advances, humans remain the weakest link in Internet security' [1], this weakness is typically characterised in one of two domains. First, systems may not enable humans to interface securely, or the security mechanisms themselves are unusable or difficult to use effectively. Second, there may be something fundamental about the behaviour of some people which leads them to become vulnerable. This paper examines the links between perceptions of risk associated with online tasks and password choice. We also explore the degrees to which the said perceptions of risk differ according to whether the password user is a security expert or not, and whether they have experienced some form of attack.",

author = "Sadie Creese and Duncan Hodges and Sue Jamison-Powell and Monica Whitty",

year = "2013",

doi = "10.1007/978-3-642-39345-7\_9",

language = "English",

isbn = "9783642393440",

series = "Lecture Notes in Computer Science",

publisher = "Springer-Verlag London Ltd.",

pages = "80--89",

booktitle = "Human Aspects of Information Security, Privacy, and Trust - First International Conference, HAS 2013, Held as Part of HCI International 2013, Proceedings",

address = "Germany",

note = "International Conference on Human Aspects of Information Security, Privacy, and Trust 2013, HCI 2013 ; Conference date: 21-07-2013 Through 26-07-2013",

url = "https://link.springer.com/chapter/10.1007/978-3-642-39345-7\_9",

}

Creese, S, Hodges, D, Jamison-Powell, S & Whitty, M 2013, Relationships between password choices, perceptions of risk and security expertise. in Human Aspects of Information Security, Privacy, and Trust - First International Conference, HAS 2013, Held as Part of HCI International 2013, Proceedings. Lecture Notes in Computer Science, vol. 8030, Springer-Verlag London Ltd., pp. 80-89, International Conference on Human Aspects of Information Security, Privacy, and Trust 2013, Las Vegas, Nevada, United States of America, 21/07/13. https://doi.org/10.1007/978-3-642-39345-7_9

Relationships between password choices, perceptions of risk and security expertise. / Creese, Sadie; Hodges, Duncan; Jamison-Powell, Sue et al.
Human Aspects of Information Security, Privacy, and Trust - First International Conference, HAS 2013, Held as Part of HCI International 2013, Proceedings. Springer-Verlag London Ltd., 2013. p. 80-89 (Lecture Notes in Computer Science; Vol. 8030).

Research output: Chapter in Book/Report/Conference proceeding › Conference Paper › Research › peer-review

TY - GEN

T1 - Relationships between password choices, perceptions of risk and security expertise

AU - Creese, Sadie

AU - Hodges, Duncan

AU - Jamison-Powell, Sue

AU - Whitty, Monica

N1 - Conference code: 1st

PY - 2013

Y1 - 2013

N2 - 'Despite technological advances, humans remain the weakest link in Internet security' [1], this weakness is typically characterised in one of two domains. First, systems may not enable humans to interface securely, or the security mechanisms themselves are unusable or difficult to use effectively. Second, there may be something fundamental about the behaviour of some people which leads them to become vulnerable. This paper examines the links between perceptions of risk associated with online tasks and password choice. We also explore the degrees to which the said perceptions of risk differ according to whether the password user is a security expert or not, and whether they have experienced some form of attack.

AB - 'Despite technological advances, humans remain the weakest link in Internet security' [1], this weakness is typically characterised in one of two domains. First, systems may not enable humans to interface securely, or the security mechanisms themselves are unusable or difficult to use effectively. Second, there may be something fundamental about the behaviour of some people which leads them to become vulnerable. This paper examines the links between perceptions of risk associated with online tasks and password choice. We also explore the degrees to which the said perceptions of risk differ according to whether the password user is a security expert or not, and whether they have experienced some form of attack.

UR - http://www.scopus.com/inward/record.url?scp=84880753888&partnerID=8YFLogxK

U2 - 10.1007/978-3-642-39345-7_9

DO - 10.1007/978-3-642-39345-7_9

M3 - Conference Paper

AN - SCOPUS:84880753888

SN - 9783642393440

T3 - Lecture Notes in Computer Science

SP - 80

EP - 89

BT - Human Aspects of Information Security, Privacy, and Trust - First International Conference, HAS 2013, Held as Part of HCI International 2013, Proceedings

PB - Springer-Verlag London Ltd.

T2 - International Conference on Human Aspects of Information Security, Privacy, and Trust 2013

Y2 - 21 July 2013 through 26 July 2013

ER -

Creese S, Hodges D, Jamison-Powell S, Whitty M. Relationships between password choices, perceptions of risk and security expertise. In Human Aspects of Information Security, Privacy, and Trust - First International Conference, HAS 2013, Held as Part of HCI International 2013, Proceedings. Springer-Verlag London Ltd. 2013. p. 80-89. (Lecture Notes in Computer Science). doi: 10.1007/978-3-642-39345-7_9

Relationships between password choices, perceptions of risk and security expertise

Abstract

Publication series

Conference

Access to Document

Other files and links

Cite this