Featured Research

from universities, journals, and other organizations

People Are Still The Weakest Link In Computer And Internet Security, Study Finds

Date:
October 14, 2009
Source:
Human Factors and Ergonomics Society
Summary:
Two decades ago, studies showed that computer users were violating best practices for setting up hack-proof passwords, and not much has changed since then. What's clear, say researchers , is that until human factors/ergonomics methods are applied to the problem, it isn't likely to go away.

Two decades ago, studies showed that computer users were violating best practices for setting up hack-proof passwords, and not much has changed since then. What's clear, say researchers at the University of Wisconsin-Madison and IT University in Copenhagen, is that until human factors/ergonomics methods are applied to the problem, it isn't likely to go away.

Related Articles


They will present the results of their CIS study at the upcoming HFES 53rd Annual Meeting at the Grand Hyatt San Antonio in San Antonio, Texas on October 19–23.

The best software and hardware in the world can do only so much to safeguard data and protect security; it's up to users to follow best practices in creating passwords to authenticate their computer when logging in. For instance, the password should contain at least eight characters; people should not use the same password every time for every site; and unlike some of the 34,000 MySpace login IDs examined in 2006, their password should not be set as "password." But the more complicated — and therefore the more secure — the password, the harder it is to remember. In addition, the best practice recommendation to use multiple, difficult-to-remember passwords for different password-protected accounts causes interference ("Which password do I use for which site?"), not to mention frustration.

Researchers Peter Hoonakker, Nis Bornoe, and Pascale Carayon developed a questionnaire based on input from network administrators and CIS experts to examine people's password behavior. They obtained responses from 836 employees of an organization that handles very sensitive private information. Respondents categorized themselves as novice, average, advanced, or expert users. Although some reported following best practices (for example, had 4 to 9 different passwords, used more complex passwords when needing special protection, changed their passwords 7 times per year, and logged off when not at the computer), 94% said they violate at least one (called a nonmalicious CIS deviation). "In reality," Hoonakker et al. said, "the results are probably worse, because respondents do not like to admit that they deviate from the rules." Perhaps not surprisingly, the less experienced the user, the more likely he or she was to violate computer authentication best practices.

But even close adherence to such best practices is compromised by human memory and information-processing limitations. A password that includes a picture may be easier to remember and presents one potential solution. Biometrics (fingerprint or retinal scans) is another alternative, or a combination of authentication methods (a smart card plus a PIN), but even these more expensive security measures are not "bullet-proof." As evidence of this, a 2009 study of a two-factor authentication approach to e-banking found that most participants preferred the least secure device because they perceived it as more user-friendly.

"A better balance has to be found between the limitations of human beings and the desire for increased security," the researchers concluded. "More research on how perceptions of usability, security, and convenience are related is needed."


Story Source:

The above story is based on materials provided by Human Factors and Ergonomics Society. Note: Materials may be edited for content and length.


Cite This Page:

Human Factors and Ergonomics Society. "People Are Still The Weakest Link In Computer And Internet Security, Study Finds." ScienceDaily. ScienceDaily, 14 October 2009. <www.sciencedaily.com/releases/2009/10/091013110053.htm>.
Human Factors and Ergonomics Society. (2009, October 14). People Are Still The Weakest Link In Computer And Internet Security, Study Finds. ScienceDaily. Retrieved January 29, 2015 from www.sciencedaily.com/releases/2009/10/091013110053.htm
Human Factors and Ergonomics Society. "People Are Still The Weakest Link In Computer And Internet Security, Study Finds." ScienceDaily. www.sciencedaily.com/releases/2009/10/091013110053.htm (accessed January 29, 2015).

Share This


More From ScienceDaily



More Computers & Math News

Thursday, January 29, 2015

Featured Research

from universities, journals, and other organizations


Featured Videos

from AP, Reuters, AFP, and other news services

'Brand Blocker' Glasses Blur Ads in Real Time

'Brand Blocker' Glasses Blur Ads in Real Time

Buzz60 (Jan. 28, 2015) A team of college students design and build a pair of goggles that will obscure any corporate branding from your field of vision. Jen Markham (@jenmarkham) has the story. Video provided by Buzz60
Powered by NewsLook.com
iPhone Sales Give Apple Record Quarter

iPhone Sales Give Apple Record Quarter

AP (Jan. 28, 2015) Apple says staggering consumer demand for new iPhones has helped the company report record-smashing earnings for its latest quarter and primed its stock for a rally. (Jan. 28) Video provided by AP
Powered by NewsLook.com
Google Fiber Pressures Incumbent ISPs With Latest Expansion

Google Fiber Pressures Incumbent ISPs With Latest Expansion

Newsy (Jan. 28, 2015) Google’s newly announced Fiber cities put it in closer competition with the likes of AT&T and Time Warner Cable. Video provided by Newsy
Powered by NewsLook.com
Google High-Speed Service Coming to 4 Cities

Google High-Speed Service Coming to 4 Cities

AP (Jan. 28, 2015) Google is expanding its fiber-optic high-speed internet service to four cities in the Southeastern US. The company selected Atlanta, Charlotte, Raleigh and Nashville and their surrounding communities. (Jan. 28) Video provided by AP
Powered by NewsLook.com

Search ScienceDaily

Number of stories in archives: 140,361

Find with keyword(s):
Enter a keyword or phrase to search ScienceDaily for related topics and research stories.

Save/Print:
Share:

Breaking News:

Strange & Offbeat Stories


Space & Time

Matter & Energy

Computers & Math

In Other News

... from NewsDaily.com

Science News

Health News

Environment News

Technology News



Save/Print:
Share:

Free Subscriptions


Get the latest science news with ScienceDaily's free email newsletters, updated daily and weekly. Or view hourly updated newsfeeds in your RSS reader:

Get Social & Mobile


Keep up to date with the latest news from ScienceDaily via social networks and mobile apps:

Have Feedback?


Tell us what you think of ScienceDaily -- we welcome both positive and negative comments. Have any problems using the site? Questions?
Mobile: iPhone Android Web
Follow: Facebook Twitter Google+
Subscribe: RSS Feeds Email Newsletters
Latest Headlines Health & Medicine Mind & Brain Space & Time Matter & Energy Computers & Math Plants & Animals Earth & Climate Fossils & Ruins