Abstract

Our study was designed to answer the following questions:
• Where does authentication fit into the daily activities people carry out?
• What characteristics of authentication may interfere with the primary activity that authentication is supposed to enable? What are the friction points?
• How do people add up the cumulative costs of authenticating multiple times each day, and how do they balance them against their own perceived security needs?
• How do people perceive the costs of performing security tasks (particularly authentication tasks) in comparison with the benefits of performing those tasks?

Links

• https://nvlpubs.nist.gov/nistpubs/ir/2014/NIST.IR.7983.pdf

Citation

Steves, M., Chisnell, D., Sasse, A., Krol, K., Theofanos, M., Wald, H., 2014. NIST IR 7983: Report: Authentication Diary Study (No. NIST IR 7983). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.IR.7983