The Psychology of Information Security

FOREWORD

So often information security is viewed as a technical discipline – a world of firewalls, antivirus software, access controls and encryption; an opaque and enigmatic discipline which defies understanding, with a priesthood who often protect their profession with complex concepts, language and, most of all, secrecy.

Leron takes a practical, pragmatic and no-holds-barred approach to demystifying the topic. He reminds us that ultimately security depends on people – and that we all act in what we see as our rational self-interest – sometimes ill-informed, ill-judged, even downright perverse.

No approach to security can ever succeed without considering people – and as a profession we need to look beyond our computers to understand the business, ...