Are information security professionals expected value maximizers?: An experiment and survey-based test
Are information security professionals expected value maximizers?: An experiment and survey-based test
复制标题
信息安全专业人员是否期望价值最大化？：基于实验和调查的测试
DOI：
10.1093/cybsec/tyw009
复制
发表时间：
2016
期刊：
影响因子：
--
通讯作者：
Andrew J. Seltzer
中科院分区：
文献类型：
--
作者：
Konstantinos Mersinas;Bjoern Hartig;K. Martin;Andrew J. Seltzer
信息安全专业人员必须评估风险，以便做出安全措施的投资决策。为了调查专业人员是否以最佳方式做出这样的决定，我们进行了一项在线实验和调查，以衡量安全专业人员的风险态度。参与者被要求陈述他们愿意支付的金额，以避免一系列只赔钱的彩票，并在这些彩票之间做出选择。我们检查了他们在这些彩票中的行为，得出的结论是，安全专业人员并没有将预期损失降至最低。我们的发现表明，安全专业人士厌恶风险和模棱两可，容易受到框架效应的影响。我们将他们的行为与随机抽样的学生的行为进行了对比。我们发现，安全专业人员的偏好在几个方面与那些学生有明显的不同。最后，我们设计了一种机制来吸引专业人员在安全性和可操作性之间的偏好。我们发现，专业人士的就业性质会影响他们对安全性和可操作性的偏好。在风险评估方法中，这些因素通常被忽视。
Information security professionals have to assess risk in order to make investment decisions on security measures. To investigate whether professionals make such decisions optimally, we conduct an online experiment and survey measuring risk attitudes of security professionals. Participants were asked to state their willingness-to-pay to avoid a series of losses-only lotteries and to make choices between such lotteries. We examine their behaviour in these lotteries and conclude that security professionals do not minimize expected losses. Our findings suggest that security professionals are risk and ambiguity averse and are susceptible to framing effects. We contrast their behaviour to that of a random sample of students. We find that the preferences of security professionals are measurably different from those students in several respects. Finally, we devise a mechanism to elicit professionals’ preferences between security and operability. We find that the nature of professionals’ employment influences their security versus operability preferences. These factors are usually overlooked in risk assessment methodologies.
快与慢的思考：跨时间尺度的优化分解
DOI：
10.1109/cdc.2017.8263834
发表时间：
2017
期刊：
56th IEEE Conference on Decision and Control
影响因子：
--
作者：
Goel, Gautam;Chen, Niangjun;Wierman, Adam
通讯作者：
Wierman, Adam