{"id":"https://openalex.org/W2941907863","doi":"https://doi.org/10.1145/3290605.3300663","title":"Security Managers Are Not The Enemy Either","display_name":"Security Managers Are Not The Enemy Either","publication_year":2019,"publication_date":"2019-04-29","ids":{"openalex":"https://openalex.org/W2941907863","doi":"https://doi.org/10.1145/3290605.3300663","mag":"2941907863"},"language":"en","primary_location":{"id":"doi:10.1145/3290605.3300663","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3290605.3300663","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2019 CHI Conference on Human Factors in Computing Systems","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5001899527","display_name":"Lena Reinfelder","orcid":null},"institutions":[{"id":"https://openalex.org/I181369854","display_name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg","ror":"https://ror.org/00f7hpc57","country_code":"DE","type":"education","lineage":["https://openalex.org/I181369854"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Lena Reinfelder","raw_affiliation_strings":["Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg, Erlangen, Bavaria, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg, Erlangen, Bavaria, Germany","institution_ids":["https://openalex.org/I181369854"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042431119","display_name":"Robert Landwirth","orcid":null},"institutions":[{"id":"https://openalex.org/I4210133470","display_name":"Fraunhofer Institute for Secure Information Technology","ror":"https://ror.org/03qt2gs44","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210133470","https://openalex.org/I4923324"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Robert Landwirth","raw_affiliation_strings":["Technical University Darmstadt & Fraunhofer SIT, Darmstadt, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technical University Darmstadt & Fraunhofer SIT, Darmstadt, Germany","institution_ids":["https://openalex.org/I4210133470"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5040519207","display_name":"Zinaida Benenson","orcid":"https://orcid.org/0009-0006-7158-0219"},"institutions":[{"id":"https://openalex.org/I181369854","display_name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg","ror":"https://ror.org/00f7hpc57","country_code":"DE","type":"education","lineage":["https://openalex.org/I181369854"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Zinaida Benenson","raw_affiliation_strings":["Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg, Erlangen, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg, Erlangen, Germany","institution_ids":["https://openalex.org/I181369854"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.4145,"has_fulltext":false,"cited_by_count":26,"citation_normalized_percentile":{"value":0.89774484,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9948999881744385,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/distrust","display_name":"Distrust","score":0.8089562058448792},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.5843138098716736},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.533699631690979},{"id":"https://openalex.org/keywords/order","display_name":"Order (exchange)","score":0.5026617050170898},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.5004675388336182},{"id":"https://openalex.org/keywords/virtuous-circle-and-vicious-circle","display_name":"Virtuous circle and vicious circle","score":0.4956749677658081},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.48530739545822144},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.47787681221961975},{"id":"https://openalex.org/keywords/security-through-obscurity","display_name":"Security through obscurity","score":0.43670955300331116},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.4287768602371216},{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.4211674630641937},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.4108823239803314},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.3911585807800293},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.3263463079929352},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.10623642802238464},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.10205760598182678}],"concepts":[{"id":"https://openalex.org/C2778321746","wikidata":"https://www.wikidata.org/wiki/Q621922","display_name":"Distrust","level":2,"score":0.8089562058448792},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.5843138098716736},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.533699631690979},{"id":"https://openalex.org/C182306322","wikidata":"https://www.wikidata.org/wiki/Q1779371","display_name":"Order (exchange)","level":2,"score":0.5026617050170898},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.5004675388336182},{"id":"https://openalex.org/C23979983","wikidata":"https://www.wikidata.org/wiki/Q1165103","display_name":"Virtuous circle and vicious circle","level":2,"score":0.4956749677658081},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.48530739545822144},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47787681221961975},{"id":"https://openalex.org/C114869243","wikidata":"https://www.wikidata.org/wiki/Q133735","display_name":"Security through obscurity","level":5,"score":0.43670955300331116},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.4287768602371216},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.4211674630641937},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.4108823239803314},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3911585807800293},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.3263463079929352},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.10623642802238464},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.10205760598182678},{"id":"https://openalex.org/C139719470","wikidata":"https://www.wikidata.org/wiki/Q39680","display_name":"Macroeconomics","level":1,"score":0.0},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3290605.3300663","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3290605.3300663","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2019 CHI Conference on Human Factors in Computing Systems","raw_type":"proceedings-article"},{"id":"pmh:oai:fraunhofer.de:N-569180","is_oa":false,"landing_page_url":"http://publica.fraunhofer.de/documents/N-569180.html","pdf_url":null,"source":{"id":"https://openalex.org/S4306400801","display_name":"Publikationsdatenbank der Fraunhofer-Gesellschaft (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Fraunhofer SIT","raw_type":"Conference Paper"},{"id":"pmh:oai:publica.fraunhofer.de:publica/406644","is_oa":false,"landing_page_url":"https://publica.fraunhofer.de/handle/publica/406644","pdf_url":null,"source":{"id":"https://openalex.org/S4306400318","display_name":"Fraunhofer-Publica (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"conference paper"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5899999737739563}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W1602619638","https://openalex.org/W1971422931","https://openalex.org/W1972093152","https://openalex.org/W1988071189","https://openalex.org/W2006449969","https://openalex.org/W2007409322","https://openalex.org/W2009661351","https://openalex.org/W2010902645","https://openalex.org/W2014672616","https://openalex.org/W2016310229","https://openalex.org/W2025043113","https://openalex.org/W2033213440","https://openalex.org/W2037202491","https://openalex.org/W2042720915","https://openalex.org/W2054566063","https://openalex.org/W2091106293","https://openalex.org/W2097719378","https://openalex.org/W2113147897","https://openalex.org/W2121513440","https://openalex.org/W2131997083","https://openalex.org/W2150341374","https://openalex.org/W2153462231","https://openalex.org/W2156565637","https://openalex.org/W2157875516","https://openalex.org/W2170554716","https://openalex.org/W2170899042","https://openalex.org/W2177150280","https://openalex.org/W2403278646","https://openalex.org/W2413059951","https://openalex.org/W2502571983","https://openalex.org/W2741451285","https://openalex.org/W2750652204","https://openalex.org/W2797122582","https://openalex.org/W2894977224","https://openalex.org/W3022607203","https://openalex.org/W3122167728","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W3156070267","https://openalex.org/W2353811196","https://openalex.org/W2372674753","https://openalex.org/W1528506334","https://openalex.org/W2008985775","https://openalex.org/W1599854324","https://openalex.org/W2397931496","https://openalex.org/W833563683","https://openalex.org/W2290724697","https://openalex.org/W1857002762"],"abstract_inverted_index":{"Security":[0],"managers":[1,26,39,63,132],"are":[2],"leading":[3],"employees":[4],"whose":[5],"decisions":[6],"shape":[7],"security":[8,25,38,59,62,81,100,118,131],"measures":[9,82,101],"and":[10,30,105,109,137],"thus":[11],"influence":[12],"the":[13,50,77],"everyday":[14],"work":[15],"of":[16,52,79,107,117],"all":[17],"users":[18,57,74,88],"in":[19,89,123],"their":[20],"organizations.":[21],"To":[22],"understand":[23],"how":[24],"handle":[27],"user":[28],"requirements":[29],"behavior,":[31],"we":[32],"conducted":[33],"semi-structured":[34],"interviews":[35],"with":[36],"seven":[37],"from":[40,143],"large-scale":[41],"German":[42],"companies.":[43],"Our":[44],"results":[45],"indicate":[46],"that":[47,55,83,122,139],"due":[48],"to":[49,76,103,111,125],"absence":[51],"organizational":[53,134],"structures":[54],"include":[56],"into":[58],"development":[60],"processes,":[61],"unintentionally":[64],"obtain":[65],"a":[66],"negative":[67],"view":[68],"on":[69],"users.":[70,144],"Their":[71],"distrust":[72],"towards":[73],"leads":[75],"creation":[78],"technical":[80],"cannot":[84],"be":[85],"influenced":[86],"by":[87],"any":[90],"way.":[91],"However,":[92],"as":[93],"previous":[94],"research":[95],"has":[96],"repeatedly":[97],"shown,":[98],"rigid":[99],"lead":[102],"frustration":[104],"discouragement":[106],"users,":[108],"also":[110],"creative":[112],"(but":[113],"usually":[114],"insecure)":[115],"methods":[116,136],"circumvention.":[119],"We":[120],"conclude":[121],"order":[124],"break":[126],"through":[127],"this":[128],"vicious":[129],"cycle,":[130],"need":[133],"structures,":[135],"tools":[138],"facilitate":[140],"systematic":[141],"feedback":[142]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}