Persuasion as Education for Computer Security

Alain Forget

Abstract

Most organisations realise the importance of computer security, yet many struggle with how to teach and influence their users to behave securely. Despite existing research in new instructions and security measures, users do not create secure and memorable passwords. In an effort to teach users how to behave more securely, we present the Persuasive Authentication Framework, which applies persuasive technology to authentication mechanisms. Furthermore, we describe some examples of how the framework can be applied to existing authentication systems.