Usable Security and E-Banking: ease of use vis-a-vis security

Australasian Journal of Information Systems

Morten Hertzum¹  Mie Nørgaard¹  Niels Jørgensen¹ 

[1] Morten Hertzum

关键词: OZCHI;    security;    banking;    ecommerce;    Denmark;   

DOI  :  10.3127/ajis.v11i2.124

学科分类：计算机科学（综合）

来源: University of Canberra * Faculty of Information Sciences and Engineering

【 摘 要 】

Electronic banking must be secure and easy to use. An evaluation of six Danish web-based electronic banking systems indicates that the systems have serious weaknesses with respect to ease of use. Our analysis of the weaknesses suggests that security requirements are among their causes and that the weaknesses may in turn cause decreased security. We view the conflict between ease of use and security in the context of usable security, a concept that is intended to match security principles and demands against user knowledge and motivation. Automation, instruction, and understanding can be identified as different approaches to usable security. Instruction is the main approach of the systems evaluated; automation relieves the user from involvement in security, as far as possible; and understanding goes beyond step-by-step instructions, to enable users to act competently and safely in situations that transcend preconceived instructions. We discuss the pros and cons of automation and understanding as alternative approaches to the design of web-based e-banking systems.

【 授权许可】

Unknown