Divide and conquers: the role of trust and assurance in the design of secure socio-technical systems

[Admin]

31. Flechais I. Riegelsberger D. Sasse A., 2005, Divide and conquers: the role of trust and assurance in the design of secure socio-technical systems, ACM 1-59593-317-4/06/02.
a. The security definition of 'trust’ turns out to map onto strategies that would be correctly described as ‘’assurance’’ in the more differentiated model.
b. We argue that distinguishing between trust and assurance yield a wider range of strategies for ensuring dependability of the human element in a secure socio-technical system.
c. The aim of security is to identify risks, and devise countermeasures that effectively mitigate the risks to the assets of a system.