Deep Blue
Deep Blue

Deep Blue at the University of Michigan > All Collections > Information, School of (SI) >

Please use this persistent URL to cite or link to this item:
http://hdl.handle.net/2027.42/49505 ◀ bookmark this

Title: Incentive-Centered Design for Information Security
Authors: Rick, Wash
MacKie-Mason, Jeffrey K.
Issue Date: 31-Jul-2006
Citation: USENIX Hot Topics in Security (HotSec 06), Vancouver, BC, 31 July 2006. <http://hdl.handle.net/2027.42/49505>
Abstract: Humans are "smart components" in a system, but cannot be directly programmed to perform; rather, their autonomy must be respected as a design constraint and incentives provided to induce desired behavior. Sometimes these incentives are properly aligned, and the humans don't represent a vulnerability. But often, a misalignment of incentives causes a weakness in the system that can be exploited by clever attackers. Incentive-centered design tools help us understand these problems, and provide design principles to alleviate them. We describe incentive-centered design and some tools it provides. We provide a number of examples of security problems for which incentive- centered design might be helpful. We elaborate with a general screening model that offers strong design principles for a class of security problems.
Appears in Collections:Information, School of (SI)
Economics, Department of

Files in This Item:

File Description SizeFormat 
icd-security-position.pdf131KbAdobe PDFView/Open

Deep Blue encourages the fair use of copyrighted material, and you are free to link to content here without asking for permission. Consult the document(s) and/or contact the copyright holder for additional rights questions and requests.