Abstract
In computer security, risk communication refers to informing computer users about the likelihood and magnitude of a threat. Efficacy of risk communication depends not only on the nature of the risk, but also on the alignment between the conceptual model embedded in the risk communication and the user’s mental model of the risk. The gap between the mental models of security experts and non-experts could lead to ineffective risk communication. Our research shows that for a variety of the security risks self-identified security experts and non-experts have different mental models. We propose that the design of the risk communication methods should be based on the non-expert mental models.
The original version of this chapter was revised: The copyright line was incorrect. This has been corrected. The Erratum to this chapter is available at DOI: 10.1007/978-3-540-77366-5_37
This is a preview of subscription content, log in via an institution.
Buying options
Tax calculation will be finalised at checkout
Purchases are for personal use only
Learn about institutional subscriptionsPreview
Unable to display preview. Download preview PDF.
References
Morgan, M.G., Fischhoff, B., Bostrom, A., Atman, C.J.: Risk Communication: A Mental Models Approach. Cambridge University Press, Cambridge (2001)
Ronnfeldt, C.F.: Three Generations of Environment and Security. Journal of Peace Research 34(4), 473–482 (1997)
Jungermann, H., Schutz, H., Thuring, M.: Mental models in risk assessment: Informing people about drugs. In: Risk Analysis, Blackwell, Oxford (1981)
Kumaraguru, P., Cranor, L.F., Newton, E.: Privacy Perceptions in India and the United States: An Interview Study. In: 33rd Research Conference on Communication, The National Center for Technology & Law, George Mason University School of Law, USA (September 2005)
Camp, L.J.: Mental Models of Security. IEEE Computer Society Press, Los Alamitos (2006)
Byrd, T.A., Cossick, K.L., Zumd, R.W.: A Synthesis of Research on Requirements Analysis and Knowledge Acquisition Techniques. MIS Quarterly 16(1), 117–138 (1992)
Hudson, W.: Playing Your Cards Right, Getting the Most from Card Sorting for Navigation Design. HCI & Higher Education Column: People: HCI & the web 12(5), 56–58 (2005)
Kruskal, J., Wish, M.: Multidimensional Scaling. Sage Publication, Thousand Oaks (1978)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2007 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Asgharpour, F., Liu, D., Camp, L.J. (2007). Mental Models of Security Risks. In: Dietrich, S., Dhamija, R. (eds) Financial Cryptography and Data Security. FC 2007. Lecture Notes in Computer Science, vol 4886. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-77366-5_34
Download citation
DOI: https://doi.org/10.1007/978-3-540-77366-5_34
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-77365-8
Online ISBN: 978-3-540-77366-5
eBook Packages: Computer ScienceComputer Science (R0)