psychology of security

There’s a new cybersecurity awareness campaign: Take9. The idea is that people—you, me, everyone—should just pause for nine seconds and think more about the link they are planning to click on, the ...

John Kelsey and I wrote a short paper for the Rossfest Festschrift: “Rational Astrologies and Security“: There is another non-security way that designers can spend their security budget: on making their own ...

Most discussions involving enterprise cybersecurity efforts focus on technical controls that protect users, systems and data from attacks and abuse. But often, successful security efforts come down to the human element of ...