Systematic Decision Making in Security Management Modelling Password Usage and

Arnell, Simon ; Beautement, Adam ; Inglesant, Philip ; Monahan, Brian ; Pym, David ; Sasse, Angela

HP Development Company

关键词: security analytics;    security management;    economics;    password;   

RP-ID  :  HPL-2011-36

学科分类：计算机科学（综合）

美国|英语

来源: HP Labs

【 摘 要 】

We demonstrate the use of a systematic decision-making methodology to support an informed choice of a password policy. Our approach uses an executable system model, grounded with empirical data, to compare, using simulations, two options. The basis of the comparison is a notion of organizational utility. Using our results, we are able to explore trade-offs between breaches of system security, users' productivity, and investment in support operations.