The Great Authentication Fatigue - And How to Overcome It
The Great Authentication Fatigue - And How to Overcome It
复制标题
巨大的身份验证疲劳 - 以及如何克服它
DOI：
--
复制
发表时间：
2014
期刊：
影响因子：
--
通讯作者：
michelle. steves
中科院分区：
文献类型：
--
作者：
M. Sasse;michelle. steves;K. Krol;Dana Chisnell;K. Krol;michelle. steves
我们进行了一项分为两部分的研究，以了解身份验证对美国政府机构员工行为和生产力的影响。我们要求23名参与者在24小时内记录所有身份验证事件，随后采访了他们的身份验证体验。我们发现，员工必须执行的身份验证任务不仅会带来巨大的工作量，而且身份验证中断主要任务的方式会降低工作效率并造成挫折感。我们的参与者报告了一系列应对策略，包括使用工具和重新组织工作以避免安全。回避意味着他们登录的频率降低，停止使用某些设备和服务。他们还报告说，由于需要“与安全作斗争”，他们没有追求创新的想法。我们的案例研究描绘了一幅由现行政策和机制造成的慢性“认证疲劳”的画面，以及对工作人员生产力和士气的负面影响。我们建议，组织需要紧急重新思考他们如何在一个普遍的技术要求，并主张从显式到隐式认证的范式转变的用户身份验证。
We conducted a two-part study to understand the impact of authentication on employees’ behaviour and productivity in a US governmental organisation. We asked 23 participants to keep a diary of all their authentication events within a 24-hour period, and subsequently interviewed them about their experience with authentication. We found that the authentication tasks employees have to perform not only carry significant workload, but that the way in which authentication disrupts primary tasks reduces productivity and creates frustration. Our participants reported a range of coping strategies, including use of tools and re-organising their work to avoid security. Avoidance meant they logged in less frequently, stopped using certain devices and services. They also reported not pursing innovative ideas because of “the battle with security” that would be required. Our case study paints a picture of chronic ‘authentication fatigue’ resulting from current policies and mechanisms, and the negative impact on staff productivity and morale. We propose that organisations need to urgently re-think how they authenticate users in a pervasive technology requirement, and advocate a paradigm shift from explicit to implicit authentication.