This paper provides an overview of critical areas of human performance research required to support the development and deployment of effective cybersecurity systems. These areas include usability and security compliance, mitigation of human error and risk reduction, enhancement of situation awareness, and development of effective visualization tools and techniques. We describe the nature of the research and development efforts required to support effective human-centered design of cybersecurity systems and make specific recommendations for near-term work in this area.
Get full access to this article
View all access options for this article.
References
1.
ANSI (2001) Common Industry Format for Usability Test Reports, ANSI-NCITS 354-2001, American National Standards Institute.
DanielM. B.ShawnB.DouglasL.AdamW.WilliamA. P. (2010). Real-time visualization of network behaviors for situational awareness. Paper presented at the Proceedings of the Seventh International Symposium on Visualization for Cyber Security, Ottawa, Ontario, Canada.
TakeshiT.HiroyukiF.YoukiK. (2010). Building ontology of cybersecurity operational information. Paper presented at the Proceedings of the Sixth Annual Workshop on Cyber Security and Information Intelligence Research, Oak Ridge, Tennessee.
9.
ParkinS.van MoorselA.InglesantP.SasseA. (2010). A Stealth Approach to Usable Security: Helping IT Security managers to Identify Workable Security Solutions. Paper presented at the Proceedings of the 2010 New Security Paradigms Workshop, Concord, Massachusetts.
U.S. Department of Homeland Security. (2009). National Infrastructure Protection Plan: Partnering to Enhance Protection and Resiliency. Retrieved from http://www.dhs.gov/xlibrary/assets/NIPP_Plan.pdf
14.
U.S. Senate S.4380 (2010) Senate Bill “Protecting Cyberspace as a National Asset Act of 2010”
15.
WestR. (2008). The Psychology of Security: Why do good users make bad decisions?Communications of the ACM, 51(4), 34-40.
