A Research Model for Investigating Human Behavior Related to Computer Security

Abstract

Computer security issues have typically been approached from the perspective of building technical countermeasures to reduce risk.Recently, researchers have recognized that computer users play an important role in ensuring secure systems by implementing those technical countermeasures.As a means of encouraging safe computing practice, user training and awareness have been touted.However, simply providing training and awareness does not ensure that users will always use safe practices.This paper introduces a model of user behavior that emphasizes the factors relating to the user's perception of risk and the choice based on that perception.As research in progress, we also briefly describe an ongoing study to further investigate this model.We will present results from this study at the conference.