Users Are Not Stupid: Eight Cybersecurity Pitfalls Overturned
summary
Julie Haney examines eight common misconceptions about users in cybersecurity, using real-world examples to show how those pitfalls undermine security. The talk focuses on practical ways to recognize and overcome these errors so organizations (security teams and product developers) can empower users to improve security outcomes.
AI-written summary · about
chapters (17)
- 0:00Start
- 5:24Usable Security
- 6:52Why the Human Element is Often Overlooked
- 8:16Not identifying all the users in security
- 12:24Assuming users are stupid or hopeless
- 15:33Not tailoring communications
- 18:442, and #3
- 21:26Putting too much burden on users
- 23:46Making users into insider threats due to poor usability
- 26:34Assuming the most secure solution is best
- 27:13Example
- 29:155, and #6
- 30:53Using punitive measures to get users to comply
- 33:50Not considering user feedback and user-centric measures of effectiveness
- 36:17and #8
- 39:39Apply What You've Learned Today
- 40:26Parting Thoughts
related talks
01h 03mWhy Don't Users Do What They are Supposed to Do? A look at users and security
44mDeveloping Cybersecurity - How do you make Staff Know Security
38mShaping Language in Cybersecurity For People
51mNavigating Faulty Assumptions and Magical Thinking in Cybersecurity
29mUsable Security: A Human-Centric Approach to Security
58mTop 10 Ways to Make Hackers Excited: Shortcuts That Were Not Worth Taking
50mYou’re Doing It Wrong! Common Security Anti Patterns
40mLike, Share and Subscribe: Effective Communication of Security Advice