Improving computer security through the analysis of human factors

计算机安全和隐私问题可能由于各种各样的原因而出现，这些原因通常涉及到人与计算机应用程序的交互。不幸的是，许多计算机应用程序的设计和评估似乎与与它们交互的人（例如，最终用户和应用程序本身的开发人员）是分开的。在计算机应用程序的设计和评估中缺乏将人的因素（例如，人的行为、心智模型和可用性）纳入其中可能会在实践中导致安全问题。这样的安全问题激发了拟议的研究计划。本研究将考察两个方向：一个是与最终用户相关的人为因素（即以用户为中心的人为因素），另一个是与软件开发人员相关的人为因素（即以开发人员为中心的人为因素）。本研究的目标是通过将以用户和开发人员为中心的人为因素纳入以安全为重点的新软件工具的设计、创建和评估中来提高计算机安全和隐私。

Computer security and privacy problems can arise for a wide variety of reasons that often involve the interaction of people with computer applications. Unfortunately, many computer applications are designed and evaluated as though they are separate from the people who interact with them (e.g., end-users and developers of the application itself ). This lack of incorporating human factors (e.g., human behaviour, mental models, and usability) in the design and evaluation of computer applications can result in security problems in practice. Such security problems motivate the proposed research program. Two directions will be examined in this research: one on human factors related to end-users (i.e., user-centered human factors) and another on human factors related to software developers (i.e., developer-centered human factors). The goal of this research is to improve computer security and privacy by incorporating user- and developer-centered human factors into the design, creation, and evaluation of new security-focused software tools.