Human-oriented computer security

糟糕的网络安全影响到每个人，从个人到大公司，非营利组织或政府机构。虽然许多安全事件都有人为因素，但这些事件通常可以追溯到系统设计和配置，这些设计和配置通过忽视人的能力和实际使用环境而对用户提出不合理的要求。就像网络协议对网络中断或丢失的数据包具有弹性一样，我建议安全系统应该具有弹性并适应人类行为。我的研究计划涉及到这种以人为本的计算机安全。主要目标是识别现实世界安全机制中的优势和漏洞，开发改进的设计并了解其安全性和可用性影响，并确定适用于一般可用安全空间的基本设计原则。对于这笔赠款，将探讨以下三个主题。

Effects of poor cybersecurity impact everyone, from individuals to large corporations, not-for-profit organizations, or government agencies. While many security incidents have a human component, these can frequently be traced back to system designs and configurations that placing unreasonable demands on users by ignore human capabilities and real-world context of use. In the same way that network protocols are resilient to network interruptions or dropped packets, I suggest that security systems should be resilient and adaptable to human behaviour. My research program relates to such human-oriented computer security. The main objectives are to identify strengths and vulnerabilities in real-world security mechanisms, to develop improved designs and understand their security and usability implications, and to identify foundational design principles applicable to the general usable security space. For this grant, the following three themes will be explored.