- Microsoft Windows chief decries standards grandstanding
- The 5 best, and 5 worst, features of Google Chrome OS
- Federal government using PS3 to crack pedophile passwords
- 10G Ethernet cheat sheet
- Top 10 free Windows tools for IT pros, at a glance
Page 2 of 2
Other human psychology tendencies, such as “anchoring” -- a mental focus on suggested options that act to manipulate bias -- often trigger wholly non-rational response in decision-making.
In this psychology framework, according to Schneier, security managers should recognize that the responses to security risk by management and users, if not themselves, may be extraordinarily irrational.
“We make bad security tradeoffs when our feeling and our reality are out of whack,” he said. “You can see vendors and politicians manipulating these biases.”
The only advantage for security managers who understand these human inclinations regarding feeling and reality is that they can use “a little bit of well-placed security fear” that will help in security deployments or even “made people feel better.”
Comments (3)
RSA '07: Bruce Schneier casts light on psychology of securityBy Anonymous on February 7, 2007, 3:40 pmIn a quarter century in the IT business, it's pretty clear that it isn't just security decisions that are poorly made. But what can a well-meaning but clueless...
Reply | Read entire comment
I guess this guy has beenBy Anonymous on February 7, 2007, 5:04 pmI guess this guy has been through airport security a time or two.
Reply | Read entire comment
wank!By Anonymous on October 15, 2008, 9:54 amwank!
Reply | Read entire comment
View all comments