资源描述：
《Chapter 2 Usability and Psychology》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。
1、CHAPTER2UsabilityandPsychologyHumansareincapableofsecurelystoringhigh-qualitycryptographickeys,andtheyhaveunacceptablespeedandaccuracywhenperformingcryptographicoperations.(Theyarealsolarge,expensivetomaintain,difficulttomanage,andtheypollutetheenvironment.Itisas
2、tonishingthatthesedevicescontinuetobemanufacturedanddeployed.Buttheyaresufficientlypervasivethatwemustdesignourprotocolsaroundtheirlimitations.)Kaufmann,PerlmanandSpeciner[698]Onlyamateursattackmachines;professionalstargetpeople.BruceSchneier2.1IntroductionManyre
3、alattacksexploitpsychologyatleastasmuchastechnology.Thefastest-growingonlinecrimeisphishing,inwhichvictimsareluredbyanemailtologontoawebsitethatappearsgenuinebutthatsactuallydesignedtostealtheirpasswords.Onlinefraudslikephishingareofteneasiertodo,andhardertostop
4、,thansimilarreal-worldfraudsbecausemostonlineprotectionmechanismsarenotanythinglikeasintuitivelyusableorasdifficulttoforgeconvincinglyastheirreal-worldequivalents;itismucheasierforcrookstobuildabogusbankwebsitethatpassescasualinspectionthanitisforthemtocreateabog
5、usbankinashoppingmall.Weveevolvedsocialandpsychologicaltoolsovermillionsofyearstohelpusdealwithdeceptioninface-to-facecontexts,butthesearelittleusetouswhenwerepresentedwithanemailthatasksustodosomething.Itseemstobehardertocreateusefulasymmetryinusability,bywhich
6、Imeanthatgooduseis1718Chapter2■UsabilityandPsychologyeasierthanbaduse.Wehavesomeexamplesofasymmetryinphysicalobjects:apotatopeeleriseasiertouseforpeelingpotatoesthanaknifeis,butalothardertouseformurder.However,muchoftheasymmetryonwhichwerelyinourdailybusinessdoe
7、sntjustdependonformalexchangeswhichcanbeautomatedeasilybutonsomecombinationofphysicalobjects,judgmentofpeople,andthesupportingsocialprotocols.(IlldiscussthisfurtherintheIntroductiontoChapter3.)So,asourrelationshipswithemployers,banksandgovernmentbecomemoreformal
8、isedviaonlinecommunication,andwelosebothphysicalandhumancontext,theforgeryofthesecommunicationsbecomesmoreofarisk.Deception,ofvariouskinds,isnowthegreatestthreattoonl
