Official websites do not use .rip
A .gov website belongs to an official government organization in the United States.

We are building a provable archive!
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Projects Human-Centered Cybersecurity Research Areas

Human-Centered Cybersecurity

Human-Centered Cybersecurity (General)

Our team often writes articles or provides presentations that discuss and provide information about human-centered cybersecurity to various audiences, for example, cybersecurity practitioners or fellow researchers.

Currently, we are conducting a multi-phased research project to understand the interactions between human-centered cybersecurity researchers and practitioners. We hope the results will lead to the creation of mutually beneficial “bridges” between the research and practitioner communities that facilitate the relevance and application of research findings to real-world practice. 

 

Publications

Papers

Mind the Gap: Exploring Human-Centered Security Researcher-Practitioner Interactions (Extended Poster Abstract) poster icon - Clyburn Cunningham, Susanne Furman, & Julie Haney. Poster session at Symposium on Usable Privacy and Security (SOUPS) (2023).

Papers

Is Usable Security an Oxymoron? paper icon – Mary Theofanos. IEEE Computer (2020).

Shouldn't All Security Be Usable? paper icon  – Mary Frances Theofanos & Shari Lawrence Pfleeger. IEEE Security & Privacy (2011)

Presentations

ISPAB Panel on Usable Security presentation icon – Mary Theofanos & Ellen Kowalczyk (Oct 29, 2010)

Usability Research in Support of Cybersecurity presentation icon – Mary Theofanos (May 7, 2008)

Poor Usability: The Inherent Insider Threat presentation icon – Mary Theofanos (Mar 21, 2008)

Blogs

Cybersecurity Awareness Month: Securing Devices at Home and Work (2020)

SANS Blog: Humans and Technology: An Insecure Mix (2020)

HelpNet Security: Inside the NIST team working to make cybersecurity more friendly (2019)

Podcasts

Beyond Technical Skills: Unlocking the Human Element in Cybersecurity,

Beyond Technical Skills: Unlocking the Human Element in Cybersecurity | Security Masterminds Podcast (2023)

Human-Centered Cybersecurity at NIST | Unlocking the Human Factor with Julie Haney | Redefining CyberSecurity Podcast with Sean Martin (2023)

Security Awareness Efforts Fall Short. Now What? | Behave: A Human Risk Podcast (2023)

Usability and Cybersecurity | Conversations in Security Podcast (2023)

Interview with Julie Haney re: NIST Usable Cybersecurity (starting at 9:35) | Paubox HIPAA Critical Podcast (2020)

Contacts

NIST Human-Centered Cybersecurity
human-cybersec@nist.gov

Julie Haney
julie.haney@nist.gov

Created November 17, 2016, Updated January 16, 2024