Cognitive Bias and Security Vulnerabilities THE PSYCHOLOGY OF SOFTWARE ENGINEERING NEIL DIXLEY.

14
Cognitive Bias and Security Vulnerabilities THE PSYCHOLOGY OF SOFTWARE ENGINEERING NEIL DIXLEY

TAGS:

Transcript of Cognitive Bias and Security Vulnerabilities THE PSYCHOLOGY OF SOFTWARE ENGINEERING NEIL DIXLEY.

Page 1: Cognitive Bias and Security Vulnerabilities THE PSYCHOLOGY OF SOFTWARE ENGINEERING NEIL DIXLEY.

Cognitive Bias and Security VulnerabilitiesTHE PSYCHOLOGY OF SOFTWARE ENGINEERING

NEIL DIXLEY

Page 2: Cognitive Bias and Security Vulnerabilities THE PSYCHOLOGY OF SOFTWARE ENGINEERING NEIL DIXLEY.

Cognitive

Page 3: Cognitive Bias and Security Vulnerabilities THE PSYCHOLOGY OF SOFTWARE ENGINEERING NEIL DIXLEY.

Security failures are cognitive failures

Page 4: Cognitive Bias and Security Vulnerabilities THE PSYCHOLOGY OF SOFTWARE ENGINEERING NEIL DIXLEY.

Two systems one brain

AutomaticIntuitiveInstinctivePrimaryRapidBlind

ConsideredEffortfulFocusedSecondarySlowerLazy

Page 5: Cognitive Bias and Security Vulnerabilities THE PSYCHOLOGY OF SOFTWARE ENGINEERING NEIL DIXLEY.

Cognitive Bias

Page 6: Cognitive Bias and Security Vulnerabilities THE PSYCHOLOGY OF SOFTWARE ENGINEERING NEIL DIXLEY.

Anchoring

Page 7: Cognitive Bias and Security Vulnerabilities THE PSYCHOLOGY OF SOFTWARE ENGINEERING NEIL DIXLEY.

Loss Aversion

Page 8: Cognitive Bias and Security Vulnerabilities THE PSYCHOLOGY OF SOFTWARE ENGINEERING NEIL DIXLEY.

Principle of Authority

Page 9: Cognitive Bias and Security Vulnerabilities THE PSYCHOLOGY OF SOFTWARE ENGINEERING NEIL DIXLEY.

Mitigating cognitive failures

Page 10: Cognitive Bias and Security Vulnerabilities THE PSYCHOLOGY OF SOFTWARE ENGINEERING NEIL DIXLEY.

Threat Modelling

Page 11: Cognitive Bias and Security Vulnerabilities THE PSYCHOLOGY OF SOFTWARE ENGINEERING NEIL DIXLEY.

Check Lists

Page 12: Cognitive Bias and Security Vulnerabilities THE PSYCHOLOGY OF SOFTWARE ENGINEERING NEIL DIXLEY.

Security First

Page 13: Cognitive Bias and Security Vulnerabilities THE PSYCHOLOGY OF SOFTWARE ENGINEERING NEIL DIXLEY.

Further information

BBC Horizon – How we really make decisions

Wikipedia – List of Cognitive Biases

Cognitive Dissonance – the book

Cognitive Dissonance – the podcast

Page 14: Cognitive Bias and Security Vulnerabilities THE PSYCHOLOGY OF SOFTWARE ENGINEERING NEIL DIXLEY.

Thank you

Twitter : @neildixley

www.neildixley.com

Perfect Image

http://www.neildixley.com/

ICT Vulnerabilities

ICT Vulnerabilities

XSS Vulnerabilities

XSS Vulnerabilities

Vulnerabilities - CordAid

Vulnerabilities - CordAid

Vulnerabilities and Performance Analysis over … · Vulnerabilities and Performance Analysis over Fingerprint Biometric Authentication Network ... print sensors vulnerabilities with

Vulnerabilities and Performance Analysis over … · Vulnerabilities and Performance Analysis over Fingerprint Biometric Authentication Network ... print sensors vulnerabilities with

Electric Sector Failure Scenarios Common Vulnerabilities ...smartgrid.epri.com/doc/NESCOR Common Vulnerabilities and Mitigat… · Failure Scenarios Common Vulnerabilities and Mitigations

Electric Sector Failure Scenarios Common Vulnerabilities ...smartgrid.epri.com/doc/NESCOR Common Vulnerabilities and Mitigat… · Failure Scenarios Common Vulnerabilities and Mitigations

802.16 Vulnerabilities

802.16 Vulnerabilities

Neil Cameron - University of Cape · PDF fileNeil Cameron Community Health ... Expanded programme on Immunization (EPI) ... information bias, sample size < = program needs, Strict

Neil Cameron - University of Cape · PDF fileNeil Cameron Community Health ... Expanded programme on Immunization (EPI) ... information bias, sample size < = program needs, Strict

Validated adjustment of remote sensing bias in complex terrain using CFD Michael Harris, Ian Locker, Neil Douglas, Romain Girault, Claude Abiven, Oisin.

Validated adjustment of remote sensing bias in complex terrain using CFD Michael Harris, Ian Locker, Neil Douglas, Romain Girault, Claude Abiven, Oisin.

Etienne Vincent Neil Carson NORAD Operational Research Team April 2012 A Decision Timeline Approach to Assessing Air and Maritime Vulnerabilities.

Etienne Vincent Neil Carson NORAD Operational Research Team April 2012 A Decision Timeline Approach to Assessing Air and Maritime Vulnerabilities.

CLIMATE CHANGE: IMPACTS, VULNERABILITIES AND ADAPTATION … · unfccc climate change: impacts, vulnerabilities and adaptation in developing ... palutikof j p, ... vulnerabilities

CLIMATE CHANGE: IMPACTS, VULNERABILITIES AND ADAPTATION … · unfccc climate change: impacts, vulnerabilities and adaptation in developing ... palutikof j p, ... vulnerabilities

CJHare Self Bias, Time Bias

CJHare Self Bias, Time Bias

 · manchester raspberry tanqueray 10 tanqueray sevilla whitley neil blackberry whitley neil blood orange whitley neil parma violet whitley neil pink grapefruit whitley neil rhubarb

 · manchester raspberry tanqueray 10 tanqueray sevilla whitley neil blackberry whitley neil blood orange whitley neil parma violet whitley neil pink grapefruit whitley neil rhubarb

Computer Vulnerabilities

Computer Vulnerabilities

Bias Temperature Stressing (BTS) of Commercial Si …neil/SiC_Workshop/Presentations_2014/11 2014...Bias Temperature Stressing (BTS) of Commercial Si and SiC Power ... system integration

Bias Temperature Stressing (BTS) of Commercial Si …neil/SiC_Workshop/Presentations_2014/11 2014...Bias Temperature Stressing (BTS) of Commercial Si and SiC Power ... system integration

‘It’s Mine!’ Children’s memory bias for self-owned items Sheila Cunningham David Turk Neil Macrae Project funded by the European Research Council UNIVERSITY.

‘It’s Mine!’ Children’s memory bias for self-owned items Sheila Cunningham David Turk Neil Macrae Project funded by the European Research Council UNIVERSITY.

Security Vulnerabilities

Security Vulnerabilities

Mobile Ion Effects on SiC MOS Bias- Temperature ...neil/SiC_Workshop... · Mobile Ion Effects on SiC MOS Bias-Temperature Instability Measurements 14-15 Aug 2014 1 . UNCLASSIFIED

Mobile Ion Effects on SiC MOS Bias- Temperature ...neil/SiC_Workshop... · Mobile Ion Effects on SiC MOS Bias-Temperature Instability Measurements 14-15 Aug 2014 1 . UNCLASSIFIED

NEIL YOUNG UNRELEASED - ARCHIVE INFORMATION NEIL …

NEIL YOUNG UNRELEASED - ARCHIVE INFORMATION NEIL …

06 Vulnerabilities

06 Vulnerabilities

Relative versus cancer-specific survival: assumptions and potential bias Diana Sarfati 1, Matt Soeberg 1, Kristie Carter 1, Neil Pearce 2, Tony Blakely.

Relative versus cancer-specific survival: assumptions and potential bias Diana Sarfati 1, Matt Soeberg 1, Kristie Carter 1, Neil Pearce 2, Tony Blakely.