Barriers to science in security

Authors:
Tom Longstaff;David Balenson;Mark Matties
Affiliations:
The Johns Hopkins University, Laurel, MD;The Johns Hopkins University, Laurel, MD;The Johns Hopkins University, Laurel, MD
Venue:
Proceedings of the 26th Annual Computer Security Applications Conference
Year:
2010

Citing 0
Cited 3

A multi-word password proposal (gridWord) and exploring questions about science in security research and usable security evaluation

Proceedings of the 2011 workshop on New security paradigms workshop
Realizing scientific methods for cyber security

Proceedings of the 2012 Workshop on Learning from Authoritative Security Experiment Results
Point-and-shoot security design: can we build better tools for developers?

Proceedings of the 2012 workshop on New security paradigms

Quantified Score

Hi-index	0.00

Visualization

Abstract

In the past year, there has been significant interest in promoting the idea of applying scientific principles to information security. The main point made by information security professionals who brief at conferences seems to be that our field of information security is finally mature enough to begin making significant strides towards applying the scientific approach. Audiences everywhere enthusiastically agree and thrash themselves for bypassing science all along, bemoaning the fact that we could be "so much further along" if we only did science. Of course, after the presentation is over, everyone goes back to the methods that have been used throughout our generation to generate prototypes and tools with no regard for the scientific principles involved.