Human-centric cybersecurity: trends - secmos invited talk

Despite the increasingly widespread automation of processes and systems in large-scale cyber infrastructures, human errors such as choosing weak passwords or knowingly or unknowingly exposing oneself to data theft are still the most common factors undermining the security of these infrastructures and systems. However, viewing the human factor as the sole cause of the vulnerability of IT systems to external attacks is a far-reaching oversimplification. Human-centric cybersecurity aims to orient security strategies to the needs, role definitions and behaviours of users of information systems. Such a strategy assumes that when security measures consider users’ experiences, they are more likely to be adopted and less likely to be ignored. This talk highlights the key tenets and trends in human-centric cybersecurity.