End User Security: Why Bother?
According to some new research, that's precisely the reason end users don't trouble themselves with strong passwords and safe surfing practices. The risks they believe they're exposed to just don't outweigh the annoyances security imposes.
According to some new research, that's precisely the reason end users don't trouble themselves with strong passwords and safe surfing practices. The risks they believe they're exposed to just don't outweigh the annoyances security imposes.The sure to be controversial research charging that users don't feel any safer when being secure than when not, comes from Cormac Herley, whose day job is as a Microsoft researcher, but who stresses that these findings are his own, and not the company's.
The insights Herley offers certainly seem to ring true -- for all of the buzz and media excitement/hype over security risks, most users simply haven't experienced the sorts of breaches or exploits that reinforce the value of the sorts of practices IT security (and security bloggers and consultants!) argue for.
Herley's point -- not that there's no good reason for strong passwords, say, but that the user doesn't perceive the good reason -- is compelling and a reminder, once more, of what a poor job has been done when it comes to explaining not only security practices but also the reason for them.
Herley's excellent paper, So Long, And No Thanks for the Externalities: The Rational Rejection of Security Advice by Users can be found here, and is well worth reading.
Read more about:
2010About the Author(s)
You May Also Like
Is AI Identifying Threats to Your Network?
May 14, 2024Where and Why Threat Intelligence Makes Sense for Your Enterprise Security Strategy
May 15, 2024Safeguarding Political Campaigns: Defending Against Mass Phishing Attacks
May 16, 2024Why Effective Asset Management is Critical to Enterprise Cybersecurity
May 21, 2024Finding Your Way on the Path to Zero Trust
May 22, 2024
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024