Human-centered strategies for cyber-physical systems security

EAI Endorsed Transactions on Security and Safety

K. Myers¹  P.A. Watters²  E.N. Ceesay³ 

[1] [e-mail];Dalferes Enterprises, Alexandria VA, USA;Johns Hopkins University, Baltimore MD, USA;

关键词: Sociotechnical systems;    human factors;    cyber security;   

DOI  :  10.4108/eai.15-5-2018.154773

来源: DOAJ

【 摘 要 】

Human error contributes to information system losses. Exposure to significant risk will continue and is not effectively addressed with conventional training. Broader strategy that addresses the social system is recommended. Such strategies have been successfully developed in industrial settings to deal with workplace hazards that are functionally similar to cyber loss. Four of these strategies are reviewed and found to be relevant to the needs of the IT-enabled organization in mitigating cyber security risks. These strategies are not consistent with each other or uniformly applicable, however, and would need to be adapted to contemporary knowledge work settings and used cautiously. Long-term institutionalization and development of organizational practices pose further challenges. While a holistic, sociotechnical systems (STS) approach to cyber security requires significant effort, IT-enabled organizations, as industrial organizations before them, will realize the effort is justified.

【 授权许可】

Unknown