Security by Checklist

Authors:
Steve Bellovin
Affiliations:
Columbia University
Venue:
IEEE Security and Privacy
Year:
2008

Citing 0
Cited 4

So long, and no thanks for the externalities: the rational rejection of security advice by users

NSPW '09 Proceedings of the 2009 workshop on New security paradigms workshop
Where do security policies come from?

Proceedings of the Sixth Symposium on Usable Privacy and Security
Challenges for protecting the privacy of health information: required certification can leave common vulnerabilities undetected

Proceedings of the second annual workshop on Security and privacy in medical and home-care systems
Security injections: modules to help students remember, understand, and apply secure coding techniques

Proceedings of the 16th annual joint conference on Innovation and technology in computer science education

Quantified Score

Hi-index	0.00

Visualization

Abstract

We've all seen the checklists with suggestions for how to secure your system. Many of us have even written them. (I have.) The problem is that security is more complicated than that, and checklists—especially if followed slavishly or enforced without thought—can make matters worse.