HomeHome

Measuring the Human Factor of Cyber Security

Brian M. Bowen; Ramaswamy Devarajan; Salvatore Stolfo

Title:
Measuring the Human Factor of Cyber Security
Author(s):
Bowen, Brian M.
Devarajan, Ramaswamy
Stolfo, Salvatore
Date:
Type:
Articles
Department(s):
Computer Science
Persistent URL:
Book/Journal Title:
IEEE International Conference on Technologies for Homeland Security: HST '11, Waltham, Massachusetts, November 15-17, 2011
Publisher:
IEEE
Publisher Location:
Piscataway, N.J.
Abstract:
This paper investigates new methods to measure, quantify and evaluate the security posture of human organizations especially within large corporations and government agencies. Computer security is not just about technology and systems. It is also about the people that use those systems and how their vulnerable behaviors can lead to exploitation. We focus on measuring enterprise-level susceptibility to phishing attacks. Results of experiments conducted at Columbia University and the system used to conduct the experiments are presented that show how the system can also be effective for training users. We include a description of follow-on work that has been proposed to DHS that aims to measure and improve the security posture of government departments and agencies, as well as for comparing security postures of individual agencies against one another.
Subject(s):
Computer science
Item views
910
Metadata:
text | xml
Suggested Citation:
Brian M. Bowen, Ramaswamy Devarajan, Salvatore Stolfo, , Measuring the Human Factor of Cyber Security, Columbia University Academic Commons, .

Columbia University Libraries | Policies | FAQ