Be afraid. Be very afraid. That’s the takeaway from the many stories written about the data breaches attributed to hacktivism, personal data or Advanced Persistent Threat, which have been dominating the security headlines in the recent years. Sales pitches of security products emphasize this, too. And people are becoming more worried. After all, anxiety is contagious, especially when the smell of fear is in the air.
Choice Fatigue, Sleep-Deprivation, Infectious Anxiety
As I read various research regarding how people perceive security risks, I am amazed by the number of physiological and neurological factors might seem irrelevant, yet have an enormous effect on our decisions. For instance:
- Choice fatigue might effect security decisions. People’s brain gets tired after making choices, such as deciding whether a security alert is worth investigating, leading the person to make the easiest choice by staying with the status quo.
- Sleep-deprivation shifts people’s common inclination to avoid loss towards to pursuing gain. As the result, decision-makers who haven’t gotten enough sleep favor expenses that contribute to potential business growth, rather than spending money to avoid possible losses.
- Anxiety is contagious among social animals and humans. By rehashing security topics among members of the security community, we are infecting each other with anxiety that might be disproportionate to the actual risks.
We rarely account for these extraneous factors when assessing what elements influenced a decision related to security risks. Smell might be another component that we rarely consider.
The Smell of Fear is Contagious
In experiments conducted at Rice University, researchers established that the smell of “fearful sweat biases women toward interpreting ambiguous expressions as more fearful.” They confirmed that “chemosignals generated by the body of people experiencing anxiety and fear produce a significant albeit subtle effect on implicit perception and cognitive performance.” In other words, women who smelled the scent of scared people were more likely to experience fear themselves.
This finding is consistent with earlier University of Vienna research of the scent of fear:
“Female subjects wore under-arm axiliary pads while watching a terrifying film… the axiliary pads were presented to female subjects in a triple forced choice test. Results show that subjects were able to discriminate between fear and non-fear axilliary pads, suggesting that women are indeed able to detect ‘the scent of fear’.”
These studies suggest that the feeling of fear may be able to spread to others through scent. This is another reminder that fear may be contagious.
What’s the Point?
First, we need to recognize that people’s decisions related to security risk aren’t based purely on rational analysis of factual data. We’re affected by external factors, such as tiredness and anxiety. Second, we need to be careful when using fear to capture the attention of readers or customers. Fear can be contagious, which might lead to the state of group anxiety that will be removed from reality. Moreover, excessive anxiety can scare people into inaction.
- Fear vs. Anxiety in Information Security: What We Can Do
- Don’t Underestimate the Importance of Feeling Secure