The security cost of cheap user interaction

Rainer Böhme, Jens Grossklags
2011 Proceedings of the 2011 workshop on New security paradigms workshop - NSPW '11  
Human attention is a scarce resource, and lack thereof can cause severe security breaches. As most security techniques rely on considerate human intervention in one way or another, this resource should be consumed economically. In this context, we postulate the view that every false alarm or unnecessary user interaction imposes a negative externality on all other potential consumers of this chunk of attention. The paper identifies incentive problems that stimulate overconsumption of human
more » ... ion in security applications. It further outlines a lump-of-attention model, devised against the backdrop of established theories in the behavioral sciences, and discusses incentive mechanisms to fix the misallocation problem in security notification, for instance the idea of a Pigovian tax on attention consumption.
doi:10.1145/2073276.2073284 dblp:conf/nspw/BohmeG11 fatcat:yxzx3c6alngllmxmnsb7syvd3y