A framework for human factors in information security

Abstract: – Any security system, no matter how well designed and implemented, will have to rely on people. The fact that human factors play a crucial part in the majority of accidents is a troubling feature of modern “security know-how”: We can implement appropriate technical solutions, but we still fail to handle the human factor. Our research project aims at understanding better the role of human factors in information security systems. We develop a system dynamical simulation model to explore the complex security problem. We use a simple, fictitious case to illustrate how system dynamics may deliver insights into the “people security problem ” and help in designing robust security policies. For further progress, collaboration with companies or organizations to the effect of collecting case studies is necessary