Jens Grossklags, Nicolas Christin, and John Chuang
In: Proceedings of the 2008 USENIX Workshop on Usability, Psychology, and Security (UPSEC'08), San Francisco, CA. April 14, 2008
Abstract
We aim to advance the understanding of individual security decision-making, by combining formal and behavioral analysis. We sketch a game-theoretic model of security decision-making that generalizes the ``weakest link'' game, and describe a controlled laboratory experiment to reveal differences between predicted and observed user behavior. Results of a pilot study yield possible explanations for behaviors observed in the wild: users show some willingness to experiment with parameters, rarely converge to a fixed behavior, and face difficulties isolating the impact of individual parameters.
Download paper:
