Improving computer security through the analysis of human factors

通过人为因素分析提高计算机安全

• 批准号: 402500-2011
• 负责人: Thorpe, Julie
• 金额: $ 1.82万
• 依托单位: University of Ontario Institute of Technology
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2012
• 资助国家: 加拿大
• 起止时间: 2012-01-01 至 2013-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=508212
• 关键词: Improving; computer; security; through; analysis

Computer security and privacy problems can arise for a wide variety of reasons that often involve the interaction of people with computer applications. Unfortunately, many computer applications are designed and evaluated as though they are separate from the people who interact with them (e.g., end-users and developers of the application itself ). This lack of incorporating human factors (e.g., human behaviour, mental models, and usability) in the design and evaluation of computer applications can result in security problems in practice. Such security problems motivate the proposed research program. Two directions will be examined in this research: one on human factors related to end-users (i.e., user-centered human factors) and another on human factors related to software developers (i.e., developer-centered human factors). The goal of this research is to improve computer security and privacy by incorporating user- and developer-centered human factors into the design, creation, and evaluation of new security-focused software tools.

计算机安全和隐私问题可能会因各种原因而出现，这些原因通常涉及人与计算机应用程序的交互。不幸的是，许多计算机应用程序的设计和评估就好像它们与与它们交互的人(例如，应用程序本身的终端用户和开发者)是分开的。在计算机应用程序的设计和评估中缺乏人的因素(例如，人的行为、心理模型和可用性)可能导致实践中的安全问题。这样的安全问题促使了拟议的研究计划。本研究将考察两个方向：一个是与最终用户有关的人的因素(即以用户为中心的人的因素)，另一个是与软件开发人员有关的人的因素(即以开发者为中心的人的因素)。这项研究的目标是通过将以用户和开发人员为中心的人为因素纳入到以安全为重点的新软件工具的设计、创建和评估中，从而提高计算机的安全性和隐私。