Human Performance in Cybersecurity: A Research Agenda

Abstract

This paper provides an overview of critical areas of human performance research required to support the development and deployment of effective cybersecurity systems. These areas include usability and security compliance, mitigation of human error and risk reduction, enhancement of situation awareness, and development of effective visualization tools and techniques. We describe the nature of the research and development efforts required to support effective human-centered design of cybersecurity systems and make specific recommendations for near-term work in this area.