Mixed-initiative security agents

Authors:
Rachel Greenstadt;Sadia Afroz;Michael Brennan
Affiliations:
Drexel University, Philadelphia, PA, USA;Drexel University, Philadelphia, PA, USA;Drexel University, Philadelphia, PA, USA
Venue:
Proceedings of the 2nd ACM workshop on Security and artificial intelligence
Year:
2009

Citing 12
Cited 0

Principles of mixed-initiative user interfaces

Proceedings of the SIGCHI conference on Human Factors in Computing Systems
Users are not the enemy

Communications of the ACM
Why phishing works

Proceedings of the SIGCHI Conference on Human Factors in Computing Systems
Why Johnny can't encrypt: a usability evaluation of PGP 5.0

SSYM'99 Proceedings of the 8th conference on USENIX Security Symposium - Volume 8
The Emperor's New Security Indicators

SP '07 Proceedings of the 2007 IEEE Symposium on Security and Privacy
Obfuscating document stylometry to preserve author anonymity

COLING-ACL '06 Proceedings of the COLING/ACL on Main conference poster sessions
You've been warned: an empirical study of the effectiveness of web browser phishing warnings

Proceedings of the SIGCHI Conference on Human Factors in Computing Systems
User-controllable learning of security and privacy policies

Proceedings of the 1st ACM workshop on Workshop on AISec
Cognitive security for personal devices

Proceedings of the 1st ACM workshop on Workshop on AISec
Anti-phishing based on automated individual white-list

Proceedings of the 4th ACM workshop on Digital identity management
Security automation considered harmful?

NSPW '07 Proceedings of the 2007 Workshop on New Security Paradigms
What instills trust? a qualitative study of phishing

FC'07/USEC'07 Proceedings of the 11th International Conference on Financial cryptography and 1st International conference on Usable Security

Quantified Score

Hi-index	0.00

Visualization

Abstract

Security decision-making is hard for both humans and machines. This is because security decisions are context-dependent, require highly dynamic, specialized knowledge,and require complex risk analysis. Multiple user studies show that humans have difficulty making these decisions, due to insufficient information and bounded rationality. However, current automated solutions are often too rigid to adequately address the problem and leave their users more confused and inept when they fail. A mixed-initiative approach, in which users and machines collaborate to make security decisions and make use of complementary strengths rather than weaknesses, is needed.