Maybe Poor Johnny Really Cannot Encrypt: The Case for a Complexity Theory for Usable Security
learning from “ shadow security ” : why understanding non - compliant behaviors provides the basis for effective security .