Systematic Decision Making in Security Management Modelling Password Usage and

[摘要] We demonstrate the use of a systematic decision-making methodology to support an informed choice of a password policy. Our approach uses an executable system model, grounded with empirical data, to compare, using simulations, two options. The basis of the comparison is a notion of organizational utility. Using our results, we are able to explore trade-offs between breaches of system security, users' productivity, and investment in support operations.

[发布机构] HP Development Company

[学科分类] 计算机科学（综合）

[关键词] security analytics;security management;economics;password