Even if users do not read security directives, their behavior
is not so catastrophic

J 2022

Even if users do not read security directives, their behavior is not so catastrophic

MATYÁŠ, Václav, Kamil MALINKA, Lydia KRAUS, Lenka KNAPOVÁ, Agáta KRUŽÍKOVÁ et. al.

Základní údaje

Originální název

Even if users do not read security directives, their behavior is not so catastrophic

Autoři

MATYÁŠ, Václav (203 Česká republika, domácí), Kamil MALINKA (203 Česká republika, domácí), Lydia KRAUS (276 Německo, domácí), Lenka KNAPOVÁ (203 Česká republika, domácí) a Agáta KRUŽÍKOVÁ (203 Česká republika, domácí)

Vydání

Communications of the ACM, New York, NY, USA, ACM, 2022, 0001-0782

Další údaje

Jazyk

angličtina

Typ výsledku

Článek v odborném periodiku

Obor

10201 Computer sciences, information science, bioinformatics

Stát vydavatele

Spojené státy

Utajení

není předmětem státního či obchodního tajemství

Odkazy

URL

Impakt faktor

Impact factor: 22.700

Kód RIV

RIV/00216224:14330/22:00124955

Organizační jednotka

Fakulta informatiky

DOI

http://dx.doi.org/10.1145/3471928

UT WoS

000731456200014

Klíčová slova anglicky

security policy; usable security; user behaviour

Příznaky

Mezinárodní význam, Recenzováno

Změněno: 5. 4. 2023 13:25, RNDr. Pavel Šmerk, Ph.D.

Anotace

V originále

We discuss an effort undertaken at Masaryk University (MU) – a Czech university with some 30.000 students – where we tried to improve our security directive to motivate users to follow it. From the research perspective, we also wanted to find out more about the current state of affairs from the user perspective: Do users (still not) follow the security policy? At the same time, the fact that our university IT infrastructure management had the intention to redesign the (outdated) security directive, constituted an ideal opportunity for us to deeper investigate the topic. And our initial faith has been hit hard – as we describe in some detail in this viewpoint, but it wasn’t a wasted effort at all. The data we obtained as a side effect shows a new perspective on this area.

Návaznosti

EF16_019/0000822, projekt VaV

Název: Centrum excelence pro kyberkriminalitu, kyberbezpečnost a ochranu kritických informačních infrastruktur

Citovat

MATYÁŠ, Václav, Kamil MALINKA, Lydia KRAUS, Lenka KNAPOVÁ a Agáta KRUŽÍKOVÁ. Even if users do not read security directives, their behavior is not so catastrophic. Communications of the ACM. New York, NY, USA: ACM, 2022, roč. 65, č. 1, s. 37-40. ISSN 0001-0782. Dostupné z: https://dx.doi.org/10.1145/3471928.

@article{1784283,
   author = {Matyáš, Václav and Malinka, Kamil and Kraus, Lydia and Knapová, Lenka and Kružíková, Agáta},
   article_location = {New York, NY, USA},
   article_number = {1},
   doi = {http://dx.doi.org/10.1145/3471928},
   keywords = {security policy; usable security; user behaviour},
   language = {eng},
   issn = {0001-0782},
   journal = {Communications of the ACM},
   title = {Even if users do not read security directives, their behavior is not so catastrophic},
   url = {https://cacm.acm.org/magazines/2022/1/257441},
   volume = {65},
   year = {2022}
}

TY  - JOUR
ID  - 1784283
AU  - Matyáš, Václav - Malinka, Kamil - Kraus, Lydia - Knapová, Lenka - Kružíková, Agáta
PY  - 2022
TI  - Even if users do not read security directives, their behavior is not so catastrophic
JF  - Communications of the ACM
VL  - 65
IS  - 1
SP  - 37-40
EP  - 37-40
PB  - ACM
SN  - 00010782
KW  - security policy
KW  - usable security
KW  - user behaviour
UR  - https://cacm.acm.org/magazines/2022/1/257441
N2  - We discuss an effort undertaken at Masaryk University (MU) – a Czech university with some 30.000 students – where we tried to improve our security directive to motivate users to follow it. From the research perspective, we also wanted to find out more about the current state of affairs from the user perspective: Do users (still not) follow the security policy? At the same time, the fact that our university IT infrastructure management had the intention to redesign the (outdated) security directive, constituted an ideal opportunity for us to deeper investigate the topic. And our initial faith has been hit hard – as we describe in some detail in this viewpoint, but it wasn’t a wasted effort at all. The data we obtained as a side effect shows a new perspective on this area.
ER  -

MATYÁŠ, Václav, Kamil MALINKA, Lydia KRAUS, Lenka KNAPOVÁ a Agáta KRUŽÍKOVÁ. Even if users do not read security directives, their behavior is not so catastrophic. \textit{Communications of the ACM}. New York, NY, USA: ACM, 2022, roč.~65, č.~1, s.~37-40. ISSN~0001-0782. Dostupné z: https://dx.doi.org/10.1145/3471928.

Podrobný výpis o publikaci