Improving computer security through the analysis of human factors

计算机安全和隐私问题可能由于各种各样的原因而出现，这些原因通常涉及人们与计算机应用程序的交互。不幸的是，许多计算机应用程序被设计和评估为好像它们与它们交互的人分离（例如，应用程序本身的最终用户和开发人员）。这种缺乏纳入人为因素（例如，人的行为、心智模型和可用性）在计算机应用程序的设计和评估中可能导致实际的安全问题。这种安全问题激发了拟议的研究计划。本研究将探讨两个方向：一个是与最终用户有关的人为因素（即，以用户为中心的人为因素）和另一个关于与软件开发者相关的人为因素（即，开发人员为中心的人为因素）。本研究的目标是通过将以用户和开发人员为中心的人为因素纳入新的以安全为中心的软件工具的设计，创建和评估来提高计算机安全和隐私。

Computer security and privacy problems can arise for a wide variety of reasons that often involve the interaction of people with computer applications. Unfortunately, many computer applications are designed and evaluated as though they are separate from the people who interact with them (e.g., end-users and developers of the application itself ). This lack of incorporating human factors (e.g., human behaviour, mental models, and usability) in the design and evaluation of computer applications can result in security problems in practice. Such security problems motivate the proposed research program. Two directions will be examined in this research: one on human factors related to end-users (i.e., user-centered human factors) and another on human factors related to software developers (i.e., developer-centered human factors). The goal of this research is to improve computer security and privacy by incorporating user- and developer-centered human factors into the design, creation, and evaluation of new security-focused software tools.