Evaluation of the human impact of password authentication practices on information security

Authors

Deborah Sater Carstens, Florida Institute of TechnologyFollow
Pamela R. McCauley-Bell, University of Central FloridaFollow
Linda C. Malone, University of Central FloridaFollow
Ronald F. DeMara, University of Central FloridaFollow

Document Type

Article

Publication Title

Informing Science

Abstract

The research objective was to develop a model for evaluating the human impact that password authentication issues are having on the security of information systems. Through distributing a survey and conducting an experiment, researchers created a model for predicting the vulnerability that a particular set of conditions will have on the likelihood of error in an information system. The survey consisted of over 250 respondents. The experiment consisted of 30 subjects and the analysis utilized a χ2 goodness of fit test. The findings indicate that human error associated with password authentication can be significantly reduced through the use of passwords comprised of data meaningful for the user and that meet the information technology community requirement for strength of password. Future research will be performed to further validate and enhance the developed model and to develop human factor password guidelines.

Publication Date

2004

Comments

This published article is made available in accordance with publishers policy. It may be subject to U.S. copyright law.

Recommended Citation

Carstens, D. S., McCauley-Bell, P. R., Malone, L. C., & DeMara, R. F. (2004). Evaluation of the human impact of password authentication practices on information security. Informing Science, 7, 67-85.