Category Archives: securityeducation

Measuring the Rationality of Security Decisions

Posted on by

Interesting research: "Dancing Pigs or Externalities? Measuring the Rationality of Security Decisions": Abstract: Accurately modeling human decision-making in security is critical to thinking about when, why, and how to recommend that users adopt certain secure behaviors. In this work, we conduct behavioral economics experiments to model the rationality of end-user security decision-making in a realistic online experimental system simulating a… Continue reading Measuring the Rationality of Security Decisions→

The Digital Security Exchange Is Live

Posted on by

Last year I wrote about the Digital Security Exchange. The project is live: The DSX works to strengthen the digital resilience of U.S. civil society groups by improving their understanding and mitigation of online threats. We do this by pairing civil society and social sector organizations with credible and trustworthy digital security experts and trainers who can help them keep… Continue reading The Digital Security Exchange Is Live→

Security Planner

Posted on by

Security Planner is a custom security advice tool from Citizen Lab. Answer a few questions, and it gives you a few simple things you can do to improve your security. It’s not meant to be comprehensive, but instead to give people things they can actually do to immediately improve their security. I don’t see it replacing any of the good… Continue reading Security Planner→

Computer Science Education Is Security Education

Posted on by

This essay argues that teaching computer science at the K-12 level is a matter of national security. I think the argument is even broader. Computers, networks, and algorithms are at the heart of all of our complex social and political issues. We need broader literacy for all sorts of political and social reasons…. Continue reading Computer Science Education Is Security Education→

I’m Writing a Book on Security

Posted on by

I’m writing a book on security in the highly connected Internet-of-Things World. Tentative title: Click Here to Kill Everybody Peril and Promise in a Hyper-Connected World There are two underlying metaphors in the book. The first is what I have called the World-Sized Web, which is that combination of mobile, cloud, persistence, personalization, agents, cyber-physical systems, and the Internet of… Continue reading I’m Writing a Book on Security→