Bruce Schneier has written an excellent essay, with a quite impressive bibliography appendix, bringing together interesting research from two fields: human psychology and security. The article title is “The Psychology of Security”, and you can find it online at:
The article starts with a phrase which I don’t think I will easily forget. Ever…
Security is both a feeling and a reality. And they are not the same.
In twenty four pages, thickly packed with descriptions of how human psychology affects our perception of the world around us, and lucid explanations about the close relationship of these perceptions with the way we evaluate security & risk, Bruce Schneier manages — in his usual, quite enjoyable style — to collect an astounding number of thought provoking facts about security.