LERSSE-PRESENTATION-2007-064

On the Imbalance of the Security Problem Space and its Expected Consequences

Konstantin Beznosov ; Olga Beznosova

12 July 2007

Abstract: This paper considers the attacker-defender game in the field of computer security as a three-dimensional phenomenon. The decomposition of the problem space into technological, human, and social factors enabled us to analyze the concentration of public research efforts by defenders. Our analysis suggests that over 94% of the public research in computer security has been concentrated on technological advances. Yet attackers seem to employ more and more human and social factors in their attacks. As the arms race in computer security progresses, social factors may become or already are increasingly important. The side that capitalizes on them sooner may gain the competitive advantage. Drawing on recent results in the organizational theory, sociology, and political science, we discuss avenues for investigating the social dimension by the defenders.

Keyword(s): Computer Security ; Social Factors ; Organizational Factors ; Usable Security ; HOT Admin

Published in: Konstantin Beznosov, Olga Beznosova "On the Imbalance of the Security Problem Space and its Expected Consequences," Presented at the Symposium on Human Aspects of Information Security & Assurance (HAISA), Plymouth, UK, 10 July, 2007, pp.29.:

The record appears in these collections:
Talks/Presentations
Usable Security

 Record created 2009-04-27, last modified 2013-05-22


Transfer from CDS 0.99.7:
Download fulltext
PDF

Rate this document:

Rate this document:
1
2
3
 
(Not yet reviewed)