I'm OK, You're OK, the System's OK
Olgierd Pieczul, Simon N. Foley, Vivien M. Rooney · 2014
The normative security paradigm seeks to view a system as a society in which security is achieved by a combination of legislative provisions and normative behaviors. Drawing solely on legislative provisions is insufficient to achieve a just and orderly society. Similarly, security paradigms that focus solely on security policies and controls are insufficient. We argue that systems have analogous normative behaviors---behavioral norms---that are learnt from system logs.Using this analogy we explore how current theories about social norms in society can provide insight into using normative behavior in systems to help achieve security.