OWASP AppSec EU 2013: Keynote: Angela's Top 10 list of reasons why users bypass security measures
Channel: Christiaan008
Date: 08/12/2013

For more information and to download the video visit: http://bit.ly/appseceu13
Playlist OWASP AppSec EU 2013: http://bit.ly/plappseceu13

Speaker: Angela Sasse

In this talk, I will examine the most common reasons why users shortcut security measures, using examples from Web and mobile security software. It reveals that users are not 'stupid' and easily distracted - as the Dancing Pigs statement implies - but make rational choices about the cost and benefit of security measures. The lesson for designers is that they need to take more responsibility (rather than just passing the buck to users), improve accuracy of detecting threats and communicate risks and consequences more precisely.