Why Humans Are the Weak Link in Cyber-Security, and How Can We Help Them
Eran Toch, Tel Aviv University
Users find it increasingly difficult to manage their privacy and security online. For example, a recent Microsoft report had showed that close to 44 percent of security breaches is the result of direct user errors. In this presentation I will discuss the part human decisions play in privacy and security challenges, and present new methods for helping users make better decisions. I will give an overview of studies that employ data mining algorithms to identify sensitive information and contexts, enabling users to better configure their privacy settings. These studies, which combine algorithm design and user experiments, highlight how addressing the human-in-the-loop can help solve challenging privacy and security problems.
Background Review Article:
User Modeling and User-Adapted Interaction, April 2012, Volume 22, Issue 1-2, pp 203-220, Personalization and privacy: a survey of privacy risks and remedies in personalization-based systems, Eran Toch, Yang Wang and Lorrie Faith Cranor