Analysis of end user security behaviors

By Jeffrey M. Stanton, K. Stam, Paul Mastrangelo, Jeffrey Jolton. Computers & security, 2005

739 citations recorded by the source corpus.

Subfields: Information Systems, Sociology and Political Science

View Paper: https://www.semanticscholar.org/paper/f1d1c22cfda42bc133303f5f22d0cfd4c3cacbda

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Information Systems

In Sociology and Political Science

Citations in the corpus

Encouraging information security behaviors in organizations: Role of penalties, pressures and perceived effectiveness (2009, background): “Policies, especially those involving information security, are viewed as mere guidelines [33] or general directionsto follow rather than “ hard andfast rules ” that are speci ﬁ ed as standards[47,60].”
Security lapses and the omission of information security measures: A threat control model and empirical test (2008, methodology): “For the grounding of our study, we examined taxonomical literature (e.g., Stanton et al., 2005) and theoretical frameworks (e.g., Siponen & Iivari, 2006).”
Scaling the Security Wall: Developing a Security Behavior Intentions Scale (SeBIS) (2015, background): “created a taxonomy of workplace computer security behaviors, and showed that they could be grouped by two dimensions: intentions and expertise [39].”
Self-efficacy in information security: Its influence on end users' information security practice behavior (2009, background): “c o m p u t e r s & s e c u r i t y 2 8 ( 2 0 0 9 ) 8 1 6 – 8 2 6 ava i lab le a t www.sc iencedi rec t .com journa l homepage : www.e lsev ier . com/ loca te /cose Self-efficacy in information security: Its influence on end users’ information security practice behavior”
Determining employee awareness using the Human Aspects of Information Security Questionnaire (HAIS-Q) (2014, background): “For example, Stanton et al. (2005) ran a survey on password-related behaviours, Mylonas et al. (2013) and Mylonas et al. (2013) examinedmobile computing, and Furnell et al. (2006) assessed users’ understanding of security features within specific applications.”
Beyond Deterrence: An Expanded View of Employee Computer Abuse (2013, background): “Internal sources of threat from human perpetrators are the focus of our work and of a growing body of behavioral research within the Information Systems academic discipline (Mahmood et al. 2008; Hu et al. 2011; Stanton et al. 2005; Warkentin and Willison 2009).”
A prototype for assessing information security awareness (2006, background): “…of information security management should be performed on two levels, viz. a business and management process level and a technical level; Stanton et al. (2005) presented work on the systematical classification of information security end user behaviours that could be used when analysing…”
Future directions for behavioral information security research (2013, background): “…related websites using corporate computers, inadvertently posting conﬁdential data onto unsecured servers or websites, or carelessly clicking on computers & security 32 (2013) 90 e 101 phishing links on emails and websites (Guo et al., 2011; Stanton et al., 2005; Willison and Warkentin, 2013).”
Of passwords and people: measuring the effect of password-composition policies (2011, background): “, when it is difficult to generate an acceptable password, or when passwords must be changed frequently), users will adopt coping strategies that can reduce both security and productivity [1, 7, 16, 18].”