Skip to main content

Why Do People Care Less About Cybersecurity?

Imagine trying to remember 10 to 50 passwords or access credentials just to get access to things you need to work done. People do not really care less about cybersecurity. The problem is that oftentimes security implementations makes the system less usable for people. That is one of the reasons why it seems that people care less about cybersecurity.

People don't really care less about cybersecurity, they are simply overwhelmed with the amount of decisions that they have to make to access their own data. People experience what is called 'decision fatigue'. It turns out, this is a known phenomenon in Psychology. This is exactly what people are experiencing and a research paper calls it 'security fatigue'

The paper is published here: https://www.computer.org/csdl/mags/it/2016/05/mit2016050026-abs.html and the National Institute of Standards in Technology (NIST) briefly wrote about the issue at https://www.nist.gov/news-events/news/2016/10/security-fatigue-can-cause-computer-users-feel-hopeless-and-act-recklessly.

The paper published last October 2016 only reinforces the idea that the addressing the mindset of people about security is at the forefront of ensuring a safer internet.

Comments

Popular Posts

Protect Personal Information - Present and Future Value

Dear Mothers, We understand you are proud of your child. You can shout to the world that you are but please do not share your child's personal information online.

Attack Example - ClickJacking+Spoofing - UI Redress - Trusted User Interface

ClickJacking and Spoofing Attack Example - Trusted User Interface attack. It used to be that the most common operating system and browser being targeted for this kind of attack is Windows and IE. The underlying reason was that Windows has more users and Internet Explorer was basically File Explorer having a different user interface. Today, the attack surface is wider and much more complicated to notice. The screenshot posted here is a combination of a User Interface (UI) spoofing from a ClickJack.