|COOKIES: By using this website you agree that we can place Google Analytics Cookies on your device for performance monitoring.|
Understanding scam victims: Seven principles for systems security
If you have a question about this talk, please contact Joseph Bonneau.
The success of many attacks on computer systems can be traced back to the security engineers not understanding the psychology of the system users they meant to protect. We examine a variety of scams and “short cons” that were investigated, documented and recreated for the BBC TV programme “The Real Hustle” and we extract from them some general principles about the recurring behavioural patterns of victims that hustlers have learnt to exploit.
We argue that an understanding of these inherent “human factors” vulnerabilities, and the necessity to take them into account during design rather than naïvely shifting the blame onto the “gullible users”, is a fundamental paradigm shift for the security engineer which, if adopted, will lead to stronger and more resilient systems security.
You can read the full tech report here:
This talk is part of the Computer Laboratory Security Seminar series.
This talk is included in these lists:
Note that ex-directory lists are not shown.
Other listsClinical Ethics Forum Type the title of a new list here Skewness, Heavy Tails, Market Crashes, and Dynamics
Other talksBradford Hill Seminar - Title TBC Annular Khovanov-Lee theory of braid closures and braided surfaces Development and evolution of neural crest contribution to the enteric nervous system ‘The present and future of primary care big data research’ Variational Bayes In Private Settings Designing organisational high-reliability? Aviation, healthcare and complex safety-critical systems