Archive for the “SHB09” category

SHB Session 8: How do we fix the world?

by adam on June 12, 2009

(Bruce Schneier has been running a successful prediction attack on my URLs, but the final session breaks his algorithm. More content to follow.) So as it turns out, I was in the last session, and didn’t blog it. Bruce Schneier (…)

Read the rest of this entry »

SHB Session 7: Privacy

by adam on June 12, 2009

Tyler Moore chaired the privacy session. Alessandro Acquisti, CMU. (Suggested reading: What Can Behavioral Economics Teach Us About Privacy?; Privacy in Electronic Commerce and the Economics of Immediate Gratification.) It’s not that people act irrationally, it’s that we need deeper (…)

Read the rest of this entry »

SHB Session 6: Terror

by adam on June 12, 2009

Bill Burns (Suggested reading Decision Research: The Diffusion of Fear: Modeling Community Response to a Terrorist Strike) Response to Crisis: Perceptions, Emotions and Behaviors. Examining a set of scenarios of threats in downtown LA. Earthquake, chlorine release, dirty bomb. Earthquake: (…)

Read the rest of this entry »

SHB Session 5: Foundations

by adam on June 12, 2009

Rachel Greenstadt chaired. I’m going to try to be a little less literal in my capture, and a little more interpretive. My comments in italic. Terence Taylor, ICLS (Suggested reading: Darwinian Security; Natural Security (A Darwinian Approach to a Dangerous (…)

Read the rest of this entry »

SHB Session 4: Methodology

by adam on June 11, 2009

David Livingstone Smith chaired. Angela Sasse “If you only remember one thing: write down everything the user needs to do and then write down everything the user needs to know to make the system work. Results of failure are large, (…)

Read the rest of this entry »

SHB Session 3: Usability

by adam on June 11, 2009

Caspar Bowden chaired session 3, on usability. Andrew Patrick NRC Canada (until Tuesday), spoke about there being two users of biometric systems: the purchaser or system operator and the subject. Argues that biometrics are being rolled out without a lot (…)

Read the rest of this entry »

SHB Session 1: Deception

by adam on June 11, 2009

Frank Stajano Understanding Victims Six principles for systems security Real systems don’t follow logic that we think about. Fraudsters understand victims really well. Working with UK TV show, “the real hustle.” Draft paper on SHB site. Principles: Distraction, social compliance, (…)

Read the rest of this entry »

Security & Human Behavior

by adam on June 11, 2009

I’m at the Security & Human Behavior workshop, and will be trying to blog notes as we go. I should be clear: these notes aren’t intended to be perfect or complete. Update: Bruce Schneier is also liveblogging. intro. Ross Anderson (…)

Read the rest of this entry »