@inproceedings{8f2acef604df4b8f80234ce16ab67b5c,
title = "Quantitative security metrics with human in the loop",
abstract = "The human factor is often regarded as the weakest link in cybersecurity systems. The investigation of several security breaches reveals an important impact of human errors in exhibiting security vulnerabilities. Although security researchers have long observed the impact of human behavior, few improvements have been made in designing secure systems that are resilient to the uncertainties of the human element. In this work, we summarize the state of the art work in human cybersecurity research, and present the Human-Influenced Task-Oriented (HITOP) formalism for modeling human decisions in security systems. We also provide a roadmap for future research. We aim at developing a simulation tool that allows modeling and analysis of security systems in light of the uncertainties of human behavior.",
keywords = "Human models, Quantitative security metrics, Security modeling",
author = "Mohammad Noureddine and Ken Keefe and Sanders, {William H.} and Masooda Bashir",
note = "Publisher Copyright: Copyright 2015 ACM.; Symposium and Bootcamp on the Science of Security, HotSoS 2015 ; Conference date: 21-04-2015 Through 22-04-2015",
year = "2015",
month = apr,
day = "21",
doi = "10.1145/2746194.2746215",
language = "English (US)",
series = "ACM International Conference Proceeding Series",
publisher = "Association for Computing Machinery",
booktitle = "Proceedings of the 2015 Symposium and Bootcamp on the Science of Security, HotSoS 2015",
address = "United States",
}